Description (CNA)
Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WESEEK, Inc. / GROWI v4.2 Series | affected versions prior to v4.2.3 |
CWE
No CWE identifiers supplied.
References
- https://github.com/weseek/growi
- https://weseek.co.jp/security/2021/01/18/vulnerability/growi-prevent-xss4/
- https://jvn.jp/en/jp/JVN57544707/index.html
ADP enrichment
No English description supplied.