CVE-2017-2255
EUVD-2017-1143829.08.2017, 01:35
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cybozu | garoon | 3.7.0 |
| cybozu | garoon | 3.7.1 |
| cybozu | garoon | 3.7.2 |
| cybozu | garoon | 3.7.3 |
| cybozu | garoon | 3.7.4 |
| cybozu | garoon | 3.7.5 |
| cybozu | garoon | 4.0.1 |
| cybozu | garoon | 4.0.2 |
| cybozu | garoon | 4.0.3 |
| cybozu | garoon | 4.2.0 |
| cybozu | garoon | 4.2.1 |
| cybozu | garoon | 4.2.2 |
| cybozu | garoon | 4.2.3 |
| cybozu | garoon | 4.2.4 |
| cybozu | garoon | 4.2.5 |
𝑥
= Vulnerable software versions