Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI.Referenceshttps://growi.co.jp/news/44/https://jvn.jp/jp/JVN38788367/
