CVE-2018-0607

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2018-07-26

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Garoon (Cybozu)
• Cybozu Garoon (Cybozu Inc.)

References

• http://jvn.jp/en/jp/JVN13415512/index.html
• https://kb.cybozu.support/article/33120/