Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6 Cybozu Dezie before 6.0(1.0) and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.