CVE-2018-0607

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Date published : 2018-07-26

https://kb.cybozu.support/article/33120/

http://jvn.jp/en/jp/JVN13415512/index.html