Lucene search
HistoryJul 19, 2024 - 9:15 a.m.
CVE-2024-39457
cybozu garoon 6.0.0
cross-site scripting
pdf preview
arbitrary script executed
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.
Affected configurations
Node
cybozugaroonRange6.0.0–6.0.2
Related
jvn
jvn
JVN#74825766: Cybozu Garoon vulnerable to cross-site scripting
2024-07-16 00:00:00
cvelist
cvelist
CVE-2024-39457
2024-07-19 08:36:27
cve
cve
CVE-2024-39457
2024-07-19 09:15:05
vulnrichment
vulnrichment
CVE-2024-39457
2024-07-19 08:36:27
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
Related for NVD:CVE-2024-39457