Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.
References
Link | Resource |
---|---|
https://support.cybozu.com/ja-jp/article/10193 | Third Party Advisory |
http://jvn.jp/en/jp/JVN52319657/index.html | Third Party Advisory |
Configurations
Information
Published : 2018-06-26 07:29
Updated : 2018-08-08 11:28
NVD link : CVE-2018-0558
Mitre link : CVE-2018-0558
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
cybozu
- mailwise