Vulnerabilities (CVE)

Filtered by vendor Pleasanter Subscribe
Filtered by product Pleasanter
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-34439 1 Pleasanter 1 Pleasanter 2023-12-12 N/A 5.4 MEDIUM
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.
CVE-2023-45210 1 Pleasanter 1 Pleasanter 2023-12-11 N/A 4.3 MEDIUM
Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.
CVE-2023-46688 1 Pleasanter 1 Pleasanter 2023-12-11 N/A 6.1 MEDIUM
Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL.