Skip to content
OpenAdvisories
Unscored CVE-2023-27304 EUVD-2023-31081GHSA-v657-8crh-gpm6

Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker t…

Published May 23, 2023 · Updated Jan 17, 2025 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to alter the data of Message and/or Bulletin.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 4.6.0 to 5.9.2 —

References