Unscored severity · published Apr 25, 2013
CVE-2013-2305
Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CD
Cybozu Dezie · Cybozu
through 8.0.6; 8.0.0; 8.0.1; 8.0.2; 8.0.3; 8.0.4; +1 more · source: NVD
CO
Cybozu Office · Cybozu
through 8; 6; 7; 9; 9.2.1 · source: NVD
MA
Mailwise · Cybozu
through 5.0; 1.0; 2.0; 2.1; 3.0; 3.0(0.2) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2305
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2305
Vendor Advisory
http://cs.cybozu.co.jp/information/20130415up10.php
jvn.jp
http://jvn.jp/en/jp/JVN06251813/374951/index.html
jvn.jp
http://jvn.jp/en/jp/JVN06251813/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000034
More from Cybozu Dezie
–
CVE-2008-6744
Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the…