Unscored CVE-2021-20800 EUVD-2021-8212GHSA-wc8v-fx85-m9p3

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject…

Published Oct 13, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Remote Service

Description

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Cybozu	Cybozu Remote Service	3.1.8	—

References

https://jvn.jp/en/jp/JVN52694228/index.html
https://kb.cybozu.support/article/37420