Skip to content
OpenAdvisories
Unscored CVE-2017-2255 EUVD-2017-11438GHSA-9jr9-v4vv-jh2h

Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text…

Published Aug 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 3.7.0 to 4.2.5 —

References