Unscored CVE-2016-1151 EUVD-2016-2255GHSA-qg86-qrqg-4cxf

Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authe…

Published Feb 17, 2016 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.

References

JVNDB-2016-000024 third-party-advisory
https://cs.cybozu.co.jp/2016/006111.html
JVN#64209269 third-party-advisory