CVE-2024-31400

2024-06-1105:15:53

[email protected]

web.nvd.nist.gov

cybozu garoon

sensitive information

data insertion

vulnerability

forwarded mail

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0. If this vulnerability is exploited, unintended data may be left in forwarded mail.

Affected configurations

Vulners

Node

cybozucybozu_garoonRange5.0.0–5.15.0

CNA Affected

[
  {
    "vendor": "Cybozu, Inc.",
    "product": "Cybozu Garoon",
    "versions": [
      {
        "version": "5.0.0 to 5.15.0",
        "status": "affected"
      }
    ]
  }
]

References

cs.cybozu.co.jp/2024/007901.html

jvn.jp/en/jp/JVN28869536/