PT-2017-15302
CVE-2017-2256
·
تاريخ النشر
2017-08-28
·
تاريخ التحديث
2017-08-30
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Cybozu Garoon versions 3.0.0 through 4.2.5
Description
A cross-site scripting issue exists, allowing an attacker to inject arbitrary web script or HTML via the
Rich text function of the application Memo.Recommendations
For Cybozu Garoon versions 3.0.0 through 4.2.5, consider disabling the
Rich text function of the Memo application until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾