PT-2021-14216
CVE-2021-20761
·
Published
2021-08-18
·
Updated
2021-08-24
Description by
CVSS 2.0
3.5
LowMetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
Cybozu Garoon versions 4.0.0 through 5.0.2
Description:
The issue is related to improper input validation in the E-mail component, allowing a remote attacker with administrative privileges to modify E-mail data without the necessary privileges.
Recommendations:
For versions 4.0.0 through 5.0.2, update to a version that includes the fix for this issue to prevent unauthorized data modification.
Found an issue in the description? Have something to add? Feel free to write us 👾