Directory Traversal Vulnerability in Pleasanter Community and Enterprise Editions
CVE-2023-32608

6.5MEDIUM

What is CVE-2023-32608?

A directory traversal vulnerability identified in Pleasanter allows remote authenticated attackers to manipulate arbitrary files on the server. This flaw affects both the Community Edition and Enterprise Edition of the software, specifically versions 1.3.39.2 and earlier. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to sensitive files, leading to further security risks.

Affected Version(s)

Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.