CVE:CVE-2013-2305
CNNVD:CNNVD-201304-544
Cybozu Office是日本才望子（Cybozu）公司的一套基于Web的跨平台协同办公解决方案。
Cybozu Office 8.1.6之前的版本和9.3.0之前的9.x版本，Cybozu Dezie 8.0.7之前的版本，Cybozu Mailwise 5.0.4之前的版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞劫持任意用户的身份认证用来发送更改密码的请求。
solution:Upgrade cybozu cybozu_office to a higher version than 8,6,7,9,9.2.1,and avoid the version (,8],6,7,9,9.2.1; Upgrade cybozu cybozu_dezie to a higher version than 8.0.6,8.0.0,8.0.1,8.0.2,8.0.3,8.0.4,8.0.5,and avoid the version (,8.0.6],8.0.0,8.0.1,8.0.2,8.0.3,8.0.4,8.0.5; Upgrade cybozu mailwise to a higher version than 5.0,1.0,2.0,2.1,3.0,3.0(0.2,and avoid the version (,5.0],1.0,2.0,2.1,3.0,3.0(0.2)