CVE-2024-31401

CVE-2024-31401 affects Cybozu Garoon, with vulnerable versions 5.0.0–5.15.2. The issue is a cross-site scripting flaw that allows a remote authenticated attacker with administrative privileges to inject arbitrary scripts into the web browser of a user logging in. Root cause described in sources i...