Unscored CVE-2013-6005 EUVD-2013-5835GHSA-hqf7-j2fw-vpfj

Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via ve…

Published Dec 13, 2013 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button.

References

cybozudezie-cve20136005-xss(89577) vdb-entry
100819 vdb-entry
JVN#21336955 third-party-advisory
JVNDB-2013-000118 third-party-advisory
http://cs.cybozu.co.jp/information/20131209up11.php
55962 third-party-advisory