CVE-2021-20737

Mô tả

Tham khảo

• jvn.jp/en/jp/JVN95457785/index.html · Third Party Advisory
• weseek.co.jp/security/2021/06/14/vulnerability/growi-nosql-ingection · Vendor Advisory

Lỗ hổng khác của growi

• CVE-2025-54806TRUNG BÌNH 6.1GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function. If a user accesses a crafted URL while l…
• CVE-2023-50339TRUNG BÌNH 5.4Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.1.11. If this vuln…
• CVE-2023-50332TRUNG BÌNH 6.5Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerabil…
• CVE-2023-50294TRUNG BÌNH 6.5The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As a result, the Secret…
• CVE-2023-50175TRUNG BÌNH 5.4Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/markdown) page, and th…