medium4.3
CVE-2024-31398
Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2.
Impact
Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product may obtain information on the list of users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Garoon | from 5.0.0 through 5.15.2 |