JVN#04125292: Cybozu Mailwise contains issue in preventing clickjacking attacks

Cybozu Mailwise contains multiple pages for editing/sending bulk emails. Some of these pages fail to protect against clickjacking attacks.

Impact

If a user views a malicious page while logged in, the user may be tricked into conducting unintended operations.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Cybozu Mailwise version 5.0.0 through 5.3.2