Cross-Site Scripting Vulnerability in Pleasanter Products
CVE-2024-21584

6.1MEDIUM

Key Information:

Vendor: Implem Inc.
Status: Pleasanter
Vendor: CVE Published:; 12 March 2024

🔔 Create Implem Inc. Vulnerability Alert

What is CVE-2024-21584?

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.

Affected Version(s)

Pleasanter 1.3.49.0 and earlier

References

https://pleasanter.org/archives/vulnerability-update-202401

https://jvn.jp/en/jp/JVN51135247/

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 12, 2024
Vulnerability Reserved
Dec 25, 2023

CVE-2024-21584 Data

JSON