CVE-2017-2093

MEDIUM

Cybozu Garoon <4.2.3 - Info Disclosure

Title source: llm

Description

Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors.

References (3)

Scores

CVSS v3 4.3
EPSS 0.0030
EPSS Percentile 52.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Classification

CWE
CWE-200
Status published

Affected Products (29)

cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
cybozu/garoon
... and 14 more

Timeline

Published Apr 28, 2017
Tracked Since Feb 18, 2026