PT-2020-18636 · Growi · Growi

Norihide Saito · Published 2020-12-03 · Updated 2020-12-03 · CVE-2020-5676

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GROWI versions 4.1.3 and earlier

Description The issue allows remote attackers to obtain information that is not allowed to access via unspecified vectors.

Recommendations For GROWI versions 4.1.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-5676

Affected Products

Growi

References · 7

• https://osv.dev/vulnerability/CVE-2020-5676 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5676 · Security Note
• https://github.com/weseek/growi · Note
• https://jvn.jp/en/jp/JVN56450373/index.html · Note
• https://t.me/cvenotify/6513 · Telegram Post
• https://hub.docker.com/r/weseek/growi · Note
• https://t.me/cibsecurity/17072 · Telegram Post