CVE-2024-39457

2024-07-1908:36:27

jpcert

www.cve.org

cybozu garoon 6.0.0

6.0.1

cross-site scripting

pdf preview

arbitrary script executed

logged-in user

web browser

EPSS

Percentile

14.7%

JSON

Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.

CNA Affected

[
  {
    "vendor": "Cybozu, Inc.",
    "product": "Cybozu Garoon",
    "versions": [
      {
        "version": "6.0.0 to 6.0.1",
        "status": "affected"
      }
    ]
  }
]