CVE-2021-20774

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.0

Description: A cross-site scripting issue in the E-mail functions of Cybozu Garoon allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Recommendations: For Cybozu Garoon versions 4.0.0 through 5.5.0, consider disabling the E-mail functions temporarily until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.