CVE-2017-2146

Description

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu.

Affected products

• Cybozu, Inc. / Cybozu Garoon3.0.0 to 4.2.4 – 3.0.0 to 4.2.4

References

• MISChttps://support.cybozu.com/ja-jp/article/9702
• MISChttp://jvn.jp/en/jp/JVN43534286/index.html