CVE-2016-4872

Cybozu Office versions 9.0.0–10.4.0 contain a breadcrumb-trail based access restrictions bypass (CVE-2016-4872). Remote authenticated attackers can bypass restrictions and view the names of unauthorized projects. This is a user‑capability exposure rather than a full remote execution issue. Mitiga...