Unscored CVE-2015-7776 EUVD-2015-7675GHSA-h8p2-jf45-r49w

Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to tr…

Published Jun 19, 2016 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196.

References

JVN#53542912 third-party-advisory
https://support.cybozu.com/ja-jp/article/8897
https://support.cybozu.com/ja-jp/article/8757
JVNDB-2016-000085 third-party-advisory
https://support.cybozu.com/ja-jp/article/8982
https://support.cybozu.com/ja-jp/article/8951