Cybozu Office 跨站请求伪造漏洞

https://www.securityfocus.com/bid/84516
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200904-437

CybozuOffice6，CybozuDezie6.0(1.0)之前版本和CybozuGaroon2.0.0到2.1.3版本存在跨站请求伪造漏洞。远程攻击者可以借助未知向量，劫持对未明受害者的身份认证。

Cybozu Cybozu Office 6 Cybozu Cybozu Garoon 3.1.3 Cybozu Cybozu Garoon 2.1.3 Cybozu Cybozu Garoon 2.1.2 Cybozu Cybozu Garoon 2.1.1 Cybozu Cybozu Garoon 2.1.0

来源:XF
名称:garoon-unspecified-csrf(43438)
链接:http://xforce.iss.net/xforce/xfdb/43438
来源:SECUNIA
名称:30882
链接:http://secunia.com/advisories/30882
来源:OSVDB
名称:46575
链接:http://osvdb.org/46575
来源:JVNDB
名称:JVNDB-2008-000033
链接:http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html
来源:JVN
名称:JVN#18405927
链接:http://jvn.jp/en/jp/JVN18405927/index.html
来源:cybozu.co.jp
链接:http://cybozu.co.jp/products/dl/notice/detail/0018.html
来源:cybozu.co.jp
链接:http://cybozu.co.jp/products/dl/notice/detail/0016.html