Sensitive Information Insertion Vulnerability in Garoon

CVE-2024-31404

What is CVE-2024-31404?

A vulnerability in Cybozu Garoon versions 5.5.0 to 6.0.0 allows logged-in users to potentially access sensitive information intended to be private. This weakness is related to the improper handling of data within the Scheduler feature, which may expose confidential data to unauthorized users. Organizations using affected versions must take immediate action to mitigate this risk and safeguard sensitive information from unauthorized visibility.

References