CVE-2020-5682
Summary
| CVE | CVE-2020-5682 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-12-16 08:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to cause a denial of service via unspecified vectors. |
Risk And Classification
Problem Types: CWE-20 | CWE-400
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GitHub - weseek/growi: GROWI - Team collaboration software using markdown | MISC | github.com | Product, Third Party Advisory |
| Docker Hub | MISC | hub.docker.com | Product, Third Party Advisory |
| JVN#94169589: Multiple vulnerabilities in GROWI | MISC | jvn.jp | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.