CVE-2013-6003: Cybozu Garoon

Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors.

Affected products

• Cybozu Garoon: version 3.1 only; version 3.5 only

Published 2013-12-05. Last modified 2026-06-16.