CVE-2024-39817 Information

Description

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6 which may allow a user who can login to the product to view data that the user does not have access by conducting ‘search’ under certain conditions in Custom App.

Reference

https://jvn.jp/en/jp/JVN29845579/ https://kb.cybozu.support/?product=office&v=&fv=10.8.7&t=%E8%84%86%E5%BC%B1%E6%80%A7&s=