Skip to content
OpenAdvisories
Unscored CVE-2020-5562 EUVD-2020-26724GHSA-x33f-59cm-w327

Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege …

Published Apr 28, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to other web servers via V-CUBE Meeting function.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 4.6.0 to 4.6.3 —

References