CVE-2024-39817

MEDIUM

Cybozu Office < 10.8.7 - Information Disclosure

Title source: rule

Description

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.

References (2)

Scores

CVSS v3 6.5
EPSS 0.0054
EPSS Percentile 67.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-200
Status published

Affected Products (1)

cybozu/office < 10.8.7

Timeline

Published Aug 06, 2024
Tracked Since Feb 18, 2026