CVE-2024-31400

2024-06-1104:26:31

jpcert

github.com

cybozu garoon

sensitive information

data insertion

vulnerability

forwarded mail

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0. If this vulnerability is exploited, unintended data may be left in forwarded mail.

CNA Affected

[
  {
    "vendor": "Cybozu, Inc.",
    "product": "Cybozu Garoon",
    "versions": [
      {
        "version": "5.0.0 to 5.15.0",
        "status": "affected"
      }
    ]
  }
]