Skip to content
OpenAdvisories
Unscored CVE-2017-2258 EUVD-2017-11441GHSA-29g9-qwhc-hg77

Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowH…

Published Aug 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications".

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 4.2.4 to 4.2.5 —

References