JVN#36259412: Web Kyukincho vulnerable to cross-site request forgery

Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site request forgery vulnerability.

Impact

If a user views a malicious page while logged in, unintended operations may be conducted.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

According to the developer, Web Kyukincho Cloud is not affected by this vulnerability.

Products Affected

• Web Kyukincho V3 versions prior to 3.0.030
  According to the developer, Web Kyukincho Cloud is not affected by this vulnerability.