CVE-2019-6022

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function...

CVE-2019-6022

CVE-2019-6022 affects Cybozu Office versions 10.0.0 to 10.8.3. The vulnerability is a directory traversal in the Customapp function that allows a remote authenticated attacker to alter arbitrary files on the server. Root cause involves improper handling of resource/file paths in the Customapp wor...