Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-31404

Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the product to view the data of Scheduler.

Published

2024-06-11T05:15:53.463

Last Modified

2025-05-28T20:09:10.057

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-922
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cybozu garoon < 6.0.1 Yes
References