CVE-2021-20671

Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the…

published March 10, 2021

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01900 · 79.5th percentile
Published
2021-03-10T09:20Z
EPSS history
Timeline
  • 10 MAR 09:20Z
    Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the…
    cvelistv5