Medium · 5.4 CVE-2023-27888 EUVD-2023-31623GHSA-8crc-hv97-gjhh

Cross-site scripting vulnerability in Joruri Gw Ver 3.2.5 and earlier allows a remote authenticated attacker to inject an arbitrary script …

Published May 10, 2023 · Updated Jan 27, 2025 · Assigned by jpcert

Description

Cross-site scripting vulnerability in Joruri Gw Ver 3.2.5 and earlier allows a remote authenticated attacker to inject an arbitrary script via Message Memo function of the affected product.

Affected products

Vendor	Product	Affected	Fixed
SiteBridge	Joruri Gw	Ver 3.2.5 and earlier	—

References

https://joruri-pwm.jp/org/docs/2022093000017/
https://jvn.jp/en/jp/JVN87559956/