CVE-2016-4868

Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests.

Score

CVSS 3.0 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-04-17

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Office (Cybozu)

References

• http://jvn.jp/en/jp/JVN08736331/index.html
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000190.html
• http://www.securityfocus.com/bid/97713
• https://support.cybozu.com/ja-jp/article/9433