A vulnerability has been reported in Cybozu products, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the request. This can be exploited to perform actions with the privileges of a target user, who is tricked into visiting a malicious website.

Please see the vendor's advisories for a list of affected products and versions.

Solution
Update to the latest version (see vendor's advisories for details).

Provided and/or discovered by
Reported via JVN.

Changelog
Further details available in Customer Area

Original Advisory
Cybozu:
http://cybozu.co.jp/products/dl/notice/detail/0016.html
http://cybozu.co.jp/products/dl/notice/detail/0018.html

JVN#18405927:
http://jvn.jp/jp/JVN18405927/index.html

Deep Links
Links available in Customer Area