Skip to content
OpenAdvisories
Unscored CVE-2017-2146 EUVD-2017-11329GHSA-f4r6-fx64-rp54

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via appli…

Published Jul 7, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 3.0.0 to 4.2.4 —

References