CVE-2017-2255

Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
References
Link Resource
https://support.cybozu.com/ja-jp/article/9746 Vendor Advisory
https://jvn.jp/en/jp/JVN63564682/index.html Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.2.4:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cybozu:garoon:4.2.5:*:*:*:*:*:*:*

Information

Published : 2017-08-28 18:35

Updated : 2017-08-30 07:45


NVD link : CVE-2017-2255

Mitre link : CVE-2017-2255


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

cybozu

  • garoon