Skip to content
OpenAdvisories
Unscored CVE-2017-2257 EUVD-2017-11440GHSA-42q6-q2fj-4rjg

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail funct…

Published Aug 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 3.0.0 to 4.2.5 —

References