CVE-2021-20762

CVE-2021-20762 is an improper input validation vulnerability in Cybozu Garoon’s E-mail component that allows a remote authenticated attacker to alter E-mail data without the proper privileges. Affected products/versions include Cybozu Garoon 4.0.0 through 5.0.2 (and related ranges noted in connec...

JVN#54794245: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1782 Cross-site scripting vulnerability in Scheduler CWE-79 - CVE-2021-20753 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...