| Package | Affected versions | Patched versions |
|---|---|---|
| garoon | ≥ 4.0.0, ≤ 4.10.1 |
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free