Description
Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors.
References
- JVN#26393529 third-party-advisory
- http://cs.cybozu.co.jp/information/gr20140225up05.php
- JVNDB-2014-000023 third-party-advisory
- https://support.cybozu.com/ja-jp/article/7994
- 65815 vdb-entry