CVE-2020-5564 - Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'

Back Back to CVE browser

MEDIUM

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'

Published Apr 28, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.78%

Description

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'.

Affected products

Vendor Cybozu, Inc. Product Cybozu Garoon Default
n/a
- Version
  4.0.0 to 4.10.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cybozu, Inc.

Cybozu Garoon

n/a

Version	Status	Constraints
4.0.0 to 4.10.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://jvn.jp/en/jp/JVN35649781/index.html
x_refsource_MISCThird Party Advisory
https://kb.cybozu.support/article/36116/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://jvn.jp/en/jp/JVN35649781/index.html		x_refsource_MISCThird Party Advisory
https://kb.cybozu.support/article/36116/		x_refsource_MISCVendor Advisory