CVE-2021-20759

CVE-2021-20759 affects Cybozu Garoon, specifically the Bulletin feature, where an operational restrictions bypass allows a remote authenticated attacker to alter Portal data without the proper privilege. Affected versions are Cybozu Garoon 4.6.0 through 5.0.2 (per NVD/Red Hat/JVN). The vulnerabil...

JVN#54794245: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1782 Cross-site scripting vulnerability in Scheduler CWE-79 - CVE-2021-20753 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...