Unscored CVE-2019-5975 EUVD-2019-15543GHSA-j283-rc5f-ccww

DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web…

Published Sep 12, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Inc."	Cybozu Garoon	4.6.0 to 4.10.2	—

References

https://kb.cybozu.support/article/35912
http://jvn.jp/en/jp/JVN62618482/index.html