Cybozu Garoon Input Validation Error Vulnerability (CNVD-2022-54301)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient user-supplied input validation in Scheduler. An attacker could use this vulnerability to pass specially crafted input to the application and change the scheduler’s data.