CVE-2021-20669: Weseek Growi

Medium severity, CVSS 4.7. EPSS: 0.8% chance of exploitation in the next 30 days.

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL.

Affected products

• Weseek Growi: up to and including 4.2.2

Published 2021-03-10. Last modified 2026-06-17.