CVE-2013-0702

Cybozu Garoon <3.5.3 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 3.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Vendor Advisory] http://cs.cybozu.co.jp/information/20130125up01.php

[Third Party Advisory] http://jvn.jp/en/jp/JVN95863326/index.html

[Third Party Advisory] http://jvndb.jvn.jp/jvndb/JVNDB-2013-000008

Scores

EPSS 0.0030

EPSS Percentile 52.7%

Details

CWE

CWE-79

Status published

Products (14)

cybozu/garoon

... and 4 more

Published Feb 14, 2013

Tracked Since Feb 18, 2026