CVE-2019-5978

MEDIUM

Cybozu Garoon 4.0.0-4.10.2 - Open Redirect via Scheduler Application

Title source: llm

Description

Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.

References (2)

Core 2

Core References

Third Party Advisory x_refsource_misc

http://jvn.jp/en/jp/JVN62618482/index.html

Vendor Advisory x_refsource_misc

https://kb.cybozu.support/article/35916

Scores

CVSS v3 6.1

EPSS 0.0027

EPSS Percentile 50.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (1)

cybozu/garoon 4.0.0 - 4.10.2

Published Sep 12, 2019

Tracked Since Feb 18, 2026