CVE-2021-20772

CVE-2021-20772 is an information disclosure vulnerability in Cybozu Garoon (Bulletin module) affecting versions 4.10.0 to 5.5.0. It allows an authenticated remote attacker to obtain the title of a Bulletin without the viewing privilege, indicating a bypass of access controls for bulletin data. Th...