{"id":"CVE-2008-6744","aliases":["EUVD-2008-6704","GHSA-f8rw-q24p-fwwr"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0),...","description":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01044,"percentile":0.64378,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2009-04-23T17:00:00Z","modified":"2026-06-16T23:02:53Z","products":[{"vendor":"cybozu","product":"cybozu_dezie"},{"vendor":"cybozu","product":"cybozu_garoon"},{"vendor":"cybozu","product":"cybozu_office"}],"references":[{"url":"http://cybozu.co.jp/products/dl/notice/detail/0016.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://cybozu.co.jp/products/dl/notice/detail/0018.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN18405927/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43438","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/30882","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://osvdb.org/46575","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-6744"},{"url":"https://github.com/advisories/GHSA-f8rw-q24p-fwwr"}],"sources":{"cve":[{"id":"CVE-2008-6744","description":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2009-04-23T17:00:00Z","modified":"2024-08-07T11:42:00.049Z","updated_at":"2026-11-02T14:34:46.587139Z"}],"euvd":[{"id":"EUVD-2008-6704","description":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2009-04-23T17:00:00Z","modified":"2024-08-07T11:42:00Z","updated_at":"2026-11-03T01:38:34.936198Z"}],"ghsa":[{"id":"GHSA-f8rw-q24p-fwwr","title":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0),...","description":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2022-05-17T02:10:27Z","modified":"2023-01-27T05:03:17Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:42:12.753514Z"}],"nvd":[{"id":"CVE-2008-6744","description":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2009-04-23T17:30:00.233Z","modified":"2026-06-16T23:02:53.273Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:01:31.451035Z"}]}}