CVE-2013-2305

MEDIUM · CVSS 6.8 EPSS 0.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-04-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-2305

Severity

MEDIUM

CVSS

6.8

EPSS

0.64%

Office

Original NVD Description

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.