CVE-2017-2258

—

CVSS 3.0

4.3 medium

EPSS

1%p69

Published

Aug 29, 2017 (Aug 29, 2017)

Modified

Jun 17, 2026

Description

Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications".

Vendors: cybozu
Products: garoon
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.