CVE-2023-27304: Medium severity cybozu garoon vulnerability
Published May 23, 2023
·Updated
Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to alter the data of Message and/or Bulletin.
Affected Software
1 affected component
Cybozu Garoon>=4.6.0<=5.9.2
Event History
May 23, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-27304.
2
What is the severity of CVE-2023-27304?
The severity of CVE-2023-27304 is medium with a severity value of 4.3.
3
Which software versions are affected by CVE-2023-27304?
Versions 4.6.0 to 5.9.2 of Cybozu Garoon are affected by CVE-2023-27304.
4
How can a remote attacker exploit CVE-2023-27304?
A remote authenticated attacker can exploit CVE-2023-27304 to alter the data of Message and/or Bulletin in Cybozu Garoon.
5
Are there any references for CVE-2023-27304?
Yes, you can find more information about CVE-2023-27304 at the following references: [Link 1](https://cs.cybozu.co.jp/2023/007698.html), [Link 2](https://jvn.jp/en/jp/JVN41694426/)