CVE-2023-27384

2023-05-2300:00:00

jpcert

www.cve.org

operation restriction bypass

multireport

cybozu garoon

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

Operation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote authenticated attacker to alter the data of MultiReport.

CNA Affected

[
  {
    "vendor": "Cybozu, Inc.",
    "product": "Cybozu Garoon",
    "versions": [
      {
        "version": "5.15.0",
        "status": "affected"
      }
    ]
  }
]

References

cs.cybozu.co.jp/2023/007698.html

jvn.jp/en/jp/JVN41694426/