Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HCybozu Garoon
APPCybozu4.0.0 – 5.9.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2024-31401CRITICAL9.0PL ✓ten sam produkt
XSS w Cybozu Garoon umożliwia wstrzyknięcie skryptu przez administratora
CVE-2019-5945CRITICAL9.8ten sam produkt
Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authe...
CVE-2016-1219CRITICAL9.8ten sam produkt
Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API u...
CVE-2022-29484HIGH8.1ten sam produkt
Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authentica...
CVE-2021-20758HIGH8.0ten sam produkt
Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote aut...