Description
customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153.
References
- JVNDB-2016-000020 third-party-advisory
- JVN#20246313 third-party-advisory
- https://cs.cybozu.co.jp/2015/006073.html