Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the processing of Slack interactive callbacks, specifically blockaction, viewsubmission, and viewclosed. An attacker can inject unauthorized system-event text...

PT-2018-8906

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.6.0 Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to view the closed title of "Space". Recommendations For Cybozu Garoon versions 4.0.0 through...

Breadcrumb trail in Cybozu Office vulnerable vulnerable to browse restriction bypass

Overview Cybozu Office provided by Cybozu,Inc. contains a browse restriction bypass vulnerability in the breadcrumb trail. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the Information Security Early...