CVE-2021-20761

CVE-2021-20761 concerns Cybozu Garoon. The vulnerability is an improper input validation in the product’s E-mail function, affecting Cybozu Garoon versions 4.0.0 to 5.0.2 . A remote attacker with administrative privileges can alter E-mail data without the appropriate privilege. The connected docu...

JVN#54794245: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1782 Cross-site scripting vulnerability in Scheduler CWE-79 - CVE-2021-20753 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...