← Database

CVE-2024-39817

MEDIUM CVSS: 6.5 Published: 2024-08-06 Modified: 2026-06-17

Description

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.

Affected Platforms

Cybozu Office

Weakness Type

NVD-CWE-noinfo, CWE-200

References