Unscored CVE-2019-5929 EUVD-2019-15497GHSA-5mfc-37m3-qp48

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the a…

Published May 17, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.

Affected products

Vendor	Product	Affected	Fixed
Cybozu	Cybozu Garoon	4.0.0 to 4.6.3	—

References

http://jvn.jp/en/jp/JVN58849431/index.html
https://kb.cybozu.support/article/34277/