CVE-2019-5939

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'...

CVE-2019-5939

CVE-2019-5939 is a Cross-site scripting vulnerability in Cybozu Garoon (Portal) affecting versions 4.0.0–4.10.1. The issue arises from insufficient validation of client-side data in the web app, enabling remote attackers to inject scripts. Exploitation is described as a browser-script impact; the...