VULNERABILITY INTELLIGENCE

CVE-2014-0820

CVSS score4 MEDIUM
EPSS probability1.49%
CISA KEVNot currently listed
Published2014-02-27
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references