CVE-2021-20767

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2

Description: A cross-site scripting issue in the Full Text Search function allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Recommendations: For Cybozu Garoon versions 4.0.0 through 5.0.2, consider restricting access to the Full Text Search function until a patch is available. As a temporary workaround, avoid using the Full Text Search feature in Cybozu Garoon versions 4.0.0 through 5.0.2 to minimize the risk of exploitation.