CVE-2011-1333: XSS

Published Jun 29, 2011

Updated

Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."

Affected Software

12 affected components

Cybozu Garoon=2.1.0

Cybozu Garoon=2.0.2

Cybozu Garoon=2.0.4

Cybozu Garoon=2.0.6

Cybozu Garoon=2.1.3

Cybozu Garoon=2.0.5

Cybozu Garoon=2.0.3

Cybozu Garoon=2.1.1

Cybozu Garoon=2.0.1

Cybozu Garoon=2.1.2

Cybozu Garoon=2.0.0

Cybozu Office=6

Remediation

Patch Available

http://cybozu.co.jp/products/dl/notice/detail/0019.html

Event History

Jun 29, 2011

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1333?

CVE-2011-1333 has a medium severity rating due to its potential for cross-site scripting attacks.

How do I fix CVE-2011-1333?

To fix CVE-2011-1333, users should upgrade to a patched version of Cybozu Office or Cybozu Garoon that is not vulnerable.

What versions are affected by CVE-2011-1333?

CVE-2011-1333 affects Cybozu Office 6 and Cybozu Garoon versions 2.0.0 through 2.1.3.

What type of vulnerability is CVE-2011-1333?

CVE-2011-1333 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.

How can attackers exploit CVE-2011-1333?

Attackers can exploit CVE-2011-1333 by injecting malicious scripts through graphic files downloaded from the bulletin board system.