{"id":"CVE-2024-39817","aliases":["EUVD-2024-38246","GHSA-4429-9xv8-3xpm"],"status":"published","title":"Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6,...","description":"Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00417,"percentile":0.36424,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2024-08-06T04:54:50Z","modified":"2026-06-17T07:42:51Z","products":[{"vendor":"cybozu","product":"office"},{"vendor":"cybozu, inc.","product":"cybozu office"}],"references":[{"url":"https://jvn.jp/en/jp/JVN29845579/","tags":["Third Party Advisory"]},{"url":"https://kb.cybozu.support/?product=office\u0026v=\u0026fv=10.8.7\u0026t=%E8%84%86%E5%BC%B1%E6%80%A7\u0026s=","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39817"},{"url":"https://jvn.jp/en/jp/JVN29845579"},{"url":"https://github.com/advisories/GHSA-4429-9xv8-3xpm"}],"sources":{"cve":[{"id":"CVE-2024-39817","description":"Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.","status":"published","published":"2024-08-06T04:54:50.932Z","modified":"2025-03-18T20:49:27.74Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:19.28149Z"}],"euvd":[{"id":"EUVD-2024-38246","description":"Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.","status":"published","published":"2024-08-06T04:54:50Z","modified":"2025-03-18T20:49:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:59.541218Z"}],"ghsa":[{"id":"GHSA-4429-9xv8-3xpm","title":"Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6,...","description":"Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.","status":"published","published":"2024-08-06T06:30:36Z","modified":"2025-03-18T21:32:53Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:00:21.277481Z"}],"nvd":[{"id":"CVE-2024-39817","description":"Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.","status":"published","published":"2024-08-06T05:15:41.087Z","modified":"2026-06-17T07:42:51.53Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:10:17.832118Z"}]}}