Cybozu Garoon RSS reader 跨站脚本攻击漏洞

https://www.securityfocus.com/bid/80706
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200903-542

CybozuGaroon2.0.0到2.1.3版本中的RSSreader存在跨站脚本攻击漏洞。远程攻击者可以借助一个特制的RSSfeed，注入任意的web脚本或HTML。

Cybozu Garoon 2.1.3 Cybozu Garoon 2.0.5 Cybozu Garoon 2.0.4 Cybozu Garoon 2.0.3 Cybozu Garoon 2.0.2 Cybozu Garoon 2.0.1 Cybozu Garoon 2.1.2

来源:cybozu.co.jp
链接:http://cybozu.co.jp/products/dl/notice/detail/0023.html
来源:XF
名称:garoon-rss-xss(43426)
链接:http://xforce.iss.net/xforce/xfdb/43426
来源:BID
名称:29981
链接:http://www.securityfocus.com/bid/29981
来源:MISC
链接:http://www.lac.co.jp/english/advisory/99_e.html
来源:SECUNIA
名称:30871
链接:http://secunia.com/advisories/30871
来源:OSVDB
名称:46565
链接:http://osvdb.org/46565
来源:JVNDB
名称:JVNDB-2008-000035
链接:http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000035.html
来源:JVN
名称:JVN#52363223
链接:http://jvn.jp/en/jp/JVN52363223/index.html