CVE-2019-5937

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information...

CVE-2019-5937

CVE-2019-5937 affects Cybozu Garoon 4.0.0–4.10.1. The vulnerability is a cross-site scripting (XSS) flaw in the user information path, allowing remote authenticated attackers to inject arbitrary web script or HTML via user information. Impact is that an attacker can execute scripts in a victim’s ...