CVE-2022-32453

2022-08-1807:13:13

jpcert

www.cve.org

cybozu office

security vulnerability

http header injection

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

48.1%

JSON

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.5"
      }
    ]
  }
]

References

cs.cybozu.co.jp/2022/007584.html

jvn.jp/en/jp/JVN20573662/index.html