CVEvulnerability
CVE-2013-6901
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• cybozu garoon (<= 3.5)
• cybozu garoon 2.0
• cybozu garoon 2.1
• cybozu garoon 2.5
• cybozu garoon 3.0
• cybozu garoon 3.1
• cybozu garoon 3.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://cs.cybozu.co.jp/information/20131202up01.php cs.cybozu.co.jp
- http://jvn.jp/en/jp/JVN23981867/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 jvndb.jvn.jp
- http://osvdb.org/100555 osvdb.org
- https://support.cybozu.com/ja-jp/article/6193 Vendor Advisory
- http://cs.cybozu.co.jp/information/20131202up01.php cs.cybozu.co.jp
- http://jvn.jp/en/jp/JVN23981867/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 jvndb.jvn.jp
- http://osvdb.org/100555 osvdb.org
- https://support.cybozu.com/ja-jp/article/6193 Vendor Advisory