CVE-2013-2305

2022-10-0316:14:59

jpcert

www.cve.org

cross-site request forgery

cybozu office

cybozu dezie

cybozu mailwise

remote attackers

hijack authentication

change passwords

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.1%

JSON

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.