PT-2017-15301
CVE-2017-2255
·
تاريخ النشر
2017-08-28
·
تاريخ التحديث
2017-08-30
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Cybozu Garoon versions 3.7.0 through 4.2.5
Description
A cross-site scripting issue exists, allowing an attacker to inject arbitrary web script or HTML via the
Rich text function of the application Space.Recommendations
For Cybozu Garoon versions 3.7.0 through 4.2.5, consider disabling the
Rich text function of the Space application until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾