Skip to content
OpenAdvisories
Unscored CVE-2016-4906 EUVD-2016-5882GHSA-5c55-w59r-9ghx

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Mess…

Published Jun 9, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 3.0.0 to 4.2.2 —

References