Cybozu Garoon Input Validation Error Vulnerability (CNVD-2022-54303)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmarks, scheduling, bulletin board, document management, etc. Cybozu Garoon suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input in Space. An attacker could exploit this vulnerability to pass specially crafted input to the application and change Space’s data.