CVE-2015-8487

Cybozu Office is affected (versions 9.0.0 through 10.3.0/10.3) by CVE-2015-8487, an information-disclosure vulnerability where remote attackers can discover CSRF tokens via unspecified vectors. The OpenVAS entries and NVD record indicate a CSRF-token disclosure in Cybozu Office, with CVSSv3 base ...