PT-2021-14222
CVE-2021-20767
·
تاريخ النشر
2021-08-18
·
تاريخ التحديث
2021-08-24
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Cybozu Garoon versions 4.0.0 through 5.0.2
Description:
A cross-site scripting issue in the Full Text Search function allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Recommendations:
For Cybozu Garoon versions 4.0.0 through 5.0.2, consider restricting access to the Full Text Search function until a patch is available.
As a temporary workaround, avoid using the Full Text Search feature in Cybozu Garoon versions 4.0.0 through 5.0.2 to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾