Skip to content
OpenAdvisories
Unscored CVE-2016-4909 EUVD-2016-5885GHSA-4r43-r2mj-mq4p

Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a l…

Published Jun 9, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via unspecified vectors.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 3.0.0 to 4.2.2 —

References