CVE-2021-20736
NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the databas...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors.
参照URL
- advisory jvn.jp
- advisory weseek.co.jp