Improper Access Control Vulnerability in Pleasanter by Pleasanter Team

CVE-2023-45210

What is CVE-2023-45210?

The Pleasanter application version 1.3.47.0 and earlier is susceptible to an improper access control vulnerability. This flaw enables a remote authenticated attacker to exploit the system by gaining unauthorized access to temporary files uploaded by other users. The vulnerability compromises the confidentiality and integrity of sensitive information, allowing attackers to view and potentially manipulate files they should not have permissions to access. Organizations using affected versions are advised to implement security updates and review access control configurations to mitigate the risk of unauthorized data exposure.

References