CVE-2017-2256

CVE-2017-2256

EPSS 0.5%

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".

Produtos afetados

Cybozu, Inc. · Cybozu Garoon

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jvn.jp/en/jp/JVN63564682/index.html https://support.cybozu.com/ja-jp/article/9744