Skip to content
OpenAdvisories
Unscored CVE-2021-20628 EUVD-2021-8046GHSA-6g4q-mgfw-5mhv

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script …

Published Mar 18, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Office

Description

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Office 10.0.0 to 10.8.4 —

References