CVE-2024-39457

July 19, 2024, 1:01 p.m.

None
No Score

Description

Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.

Product(s) Impacted

Product Versions
Cybozu Garoon
  • ['6.0.0', '6.0.1']

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://jvn.jp/en/jp/JVN74825766/
https://kb.cybozu.support/?product=garoon&v=&fv=6.0.2&t=%E8%84%86%E5%BC%B1%E6%80%A7&f=&r=&b=&s=&posts_per_page=20

Tags

vultures@jpcert.or.jp
2024-07-19
CVE-2024-39457

Timeline

Published: July 19, 2024, 9:15 a.m.
Last Modified: July 19, 2024, 1:01 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.