CVE-2019-5946

MEDIUM

Cybozu Garoon 4.2.4-4.10.1 - Open Redirect via Login Screen

Title source: llm
STIX 2.1

Description

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
http://jvn.jp/en/jp/JVN58849431/index.html
Vendor Advisory x_refsource_misc
https://kb.cybozu.support/article/35492/

Scores

CVSS v3 6.1
EPSS 0.0022
EPSS Percentile 43.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-601
Status published
Products (1)
cybozu/garoon 4.2.4 - 4.10.1
Published May 17, 2019
Tracked Since Feb 18, 2026