Open Redirect Vulnerability in Pleasanter Web Application
CVE-2023-46688

6.1MEDIUM

Key Information:

Vendor
CVE Published:
6 December 2023

What is CVE-2023-46688?

An open redirect vulnerability exists in Pleasanter versions 1.3.47.0 and earlier, enabling remote unauthenticated attackers to craft deceptive URLs that can redirect users to any arbitrary web location. This flaw poses significant security risks as it allows attackers to exploit the trust users have in the Pleasanter platform, potentially leading them to malicious sites without their consent. Organizations using affected versions should prioritize updates and monitor for suspicious redirects to safeguard user data.

Affected Version(s)

Pleasanter 1.3.47.0 and earlier

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.