Unscored CVE-2016-4868 EUVD-2016-5848GHSA-whgq-g35m-vx9r

Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send uni…

Published Apr 17, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests.

References

https://support.cybozu.com/ja-jp/article/9433
97713 vdb-entry
JVN#08736331 third-party-advisory
JVNDB-2016-000190 third-party-advisory