CVE-2013-2305

Published: Apr 25, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.

Affected (18)

Products: Cybozu: Cybozu Office, Cybozu Dezie, Mailwise

3 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cybozu Cybozu Office	Up to 8
Cybozu Cybozu Office	Version 6
Cybozu Cybozu Office	Version 7
Cybozu Cybozu Office	Version 9.2.1
Cybozu Cybozu Office	Version 9

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Cybozu Cybozu Dezie	Up to 8.0.6
Cybozu Cybozu Dezie	Version 8.0.0
Cybozu Cybozu Dezie	Version 8.0.1
Cybozu Cybozu Dezie	Version 8.0.2
Cybozu Cybozu Dezie	Version 8.0.3
Cybozu Cybozu Dezie	Version 8.0.4
Cybozu Cybozu Dezie	Version 8.0.5

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Cybozu Mailwise	Up to 5.0
Cybozu Mailwise	Version 1.0
Cybozu Mailwise	Version 2.0
Cybozu Mailwise	Version 2.1
Cybozu Mailwise	Version 3.0
Cybozu Mailwise	Version 3.0(0.2)