CVE-2020-5676 - GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vectors

HIGH

GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vectors

Published Dec 3, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.79%

GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vectors.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
v4.1.3 and earlier	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26837		Advisory
https://github.com/weseek/growi		x_refsource_MISCProductThird Party Advisory
https://hub.docker.com/r/weseek/growi/		x_refsource_MISCProductThird Party Advisory
https://jvn.jp/en/jp/JVN56450373/index.html		x_refsource_MISCThird Party Advisory