CVE-2020-5682 in GROWI

Summary

by MITRE • 12/16/2020

Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to cause a denial of service via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 12/16/2020
• Moderation: accepted
• Entry: VDB-166450
• CPE: ready
• CWE: CWE-404 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00846
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-5682
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-5682
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-5682/