CVE-2021-20668: Weseek Growi

Low severity, CVSS 2.7. EPSS: 0.9% chance of exploitation in the next 30 days.

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafted URL.

Affected products

• Weseek Growi: up to and including 4.2.2

Published 2021-03-10. Last modified 2026-06-17.