Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Priority LOW 27

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00355 Published 2024-03-12 No fix listed CWE-79
Priority LOW 25

Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00397 Published 2023-12-06 No fix listed CWE-79
TI-2023-25184 CVE-2023-46688 · GHSA-2jj8-7w4h-hf3p

Open redirect in Implem Inc. Pleasanter

Priority LOW 28

Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00526 Published 2023-12-06 No fix listed CWE-601
Priority LOW 21

Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00516 Published 2023-12-06 No fix listed CWE-284
TI-2023-15889 CVE-2023-32608 · GHSA-5c4q-86gx-hff8

Path traversal in Implem Inc. Pleasanter

Priority LOW 31

Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01158 Published 2023-06-30 No fix listed CWE-22
Priority LOW 25

Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00527 Published 2023-06-30 No fix listed CWE-79
Priority LOW 26

Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00671 Published 2023-06-01 No fix listed CWE-79