Skip to content
OpenAdvisories
Unscored CVE-2018-0607 EUVD-2018-1417GHSA-m3vw-5x9w-rpjf

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to e…

Published Jul 26, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 3.5.0 to 4.6.2 —

References