CVE-2024-31400: Cybozu Garoon

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0. If this vulnerability is exploited, unintended data may be left in forwarded mail.

Affected products

• Cybozu Garoon: from 5.5.0, before 6.0.0 (fixed in 6.0.0)

Published 2024-06-11. Last modified 2026-06-17.