CVE-2008-6744

MEDIUM 6.8CVE-2008-6744 · Published 23/04/2009 · updated 16/06/2026

In short

CVE-2008-6744 is a MEDIUM (CVSS 6.8) vulnerability affecting cybozu dezie (cybozu), cybozu garoon (cybozu), cybozu office (cybozu).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cybozu dezie cybozu	`≤ 6`	No fix yet
cybozu garoon cybozu	`= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.1.0= 2.1.1= 2.1.2= 2.1.3`	No fix yet
cybozu office cybozu	`= 6`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References

cybozu.co.jp/products/dl/notice/detail/0016.html · Vendor Advisory
cybozu.co.jp/products/dl/notice/detail/0018.html · Vendor Advisory
jvn.jp/en/jp/JVN18405927/index.html
jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html
osvdb.org/46575
secunia.com/advisories/30882 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/43438

More vulnerabilities in cybozu dezie

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free