CVE-2023-27304

Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to alter the data of Message and/or Bulletin...

CVE-2023-27304

The CVE-2023-27304 entry concerns Cybozu Garoon. Affected versions range from 4.6.0 to 5.9.2 and the issue is an operation restriction bypass in the Message and Bulletin components, enabling a remote authenticated attacker to alter data. The underlying cause is insufficient authorization checks w...