CVE-2016-1151

High

Published: 17/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office versions 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.

Risk Assessment

Attackers can exploit these vulnerabilities to take over user sessions, leading to unauthorized access to application data and functions.

Recommendation

It is recommended to update Cybozu Office to the latest version to eliminate these vulnerabilities and implement additional security measures against CSRF.

Other vulnerabilities in Cybozu Office

CVE-2015-8483High
CVE-2015-8483 in Cybozu Office versions 10.2.0 to 10.3.0 has an open redirect vulnerability that allows remote attackers to redirect users to arbitrary websites.

Original NVD description (English source)

Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.