Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-31398

Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product may obtain information on the list of users.

Published

2024-06-11T06:15:10.347

Last Modified

2025-03-13T14:15:25.450

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cybozu garoon ≤ 5.15.2 Yes
References