← Back

CVE-2016-4907

nvd nist
Published: Jun 9, 2017Modified: May 13, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.

Affected (27)

Products: Cybozu: Garoon
Cybozu
1 product
Garoon
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Cybozu
Garoon
Version 3.0.0
Garoon
Version 3.0.1
Garoon
Version 3.0.2
Garoon
Version 3.0.3
Garoon
Version 3.1.0
Garoon
Version 3.1.1
Garoon
Version 3.1.2
Garoon
Version 3.1.3
Garoon
Version 3.5.0
Garoon
Version 3.5.1
Garoon
Version 3.5.2
Garoon
Version 3.5.3
Garoon
Version 3.5.4
Garoon
Version 3.5.5
Garoon
Version 3.7.0
Garoon
Version 3.7.1
Garoon
Version 3.7.2
Garoon
Version 3.7.3
Garoon
Version 3.7.4
Garoon
Version 3.7.5
Garoon
Version 4.0.0
Garoon
Version 4.0.1
Garoon
Version 4.0.2
Garoon
Version 4.0.3
Garoon
Version 4.2.0
Garoon
Version 4.2.1
Garoon
Version 4.2.2

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (6)

Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.