CVE-2024-39817

—

CVSS 3.1

6.5 medium

EPSS

<1%p35

Published

Aug 6, 2024 (Aug 6, 2024)

Modified

Jun 17, 2026

Description

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.

Vendors: cybozu
Products: office
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.