CVE-2020-5565

Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and 'MultiReport'.

Score

CVSS 3.1 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2020-04-28

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Garoon (Cybozu)
• Cybozu Garoon (Cybozu Inc.)

References

• https://jvn.jp/en/jp/JVN35649781/index.html
• https://kb.cybozu.support/article/36119/