CVE-2016-4874

Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack...

CVE-2016-4874

CVE-2016-4874 affects Cybozu Office (versions 9.0.0 through 10.4.0). The vulnerability is a Reflected File Download (RFD) that could enable remote attackers to cause unintended files to be downloaded when a logged-in user visits a malicious page. Root cause details are not explicitly provided in ...