CVE-2016-1213

The “Scheduler” function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.