Stored Cross-Site Scripting Vulnerability in Pleasanter by Pleasanter
CVE-2023-32607

5.4MEDIUM

Key Information:

Vendor: Implem Inc.
Status: Pleasanter (community Edition And Enterprise Edition)
Vendor: CVE Published:; 30 June 2023

🔔 Create Implem Inc. Vulnerability Alert

What is CVE-2023-32607?

The vulnerability in Pleasanter allows a remote authenticated attacker to exploit stored cross-site scripting weaknesses, enabling script injection. This security flaw permits potential attackers to deliver arbitrary scripts, impacting the integrity and confidentiality of user interactions within the affected versions of the software. Proper mitigation measures are necessary to safeguard users from possible exploits.

Affected Version(s)

Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions

References

https://pleasanter.org/archives/vulnerability-update-202306

https://jvn.jp/en/jp/JVN97818024/

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 30, 2023
Vulnerability Reserved
May 11, 2023

CVE-2023-32607 Data

JSON