CVE-2021-20669

—

CVSS 3.1

4.7 medium

EPSS

<1%p53

Published

Mar 10, 2021 (Mar 10, 2021)

Modified

Jun 17, 2026

Description

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL.

Vendors: weseek
Products: growi
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.