CVE-2024-21584

2024-03-1208:15:45

[email protected]

web.nvd.nist.gov

pleasanter

1.3.49.0

cross-site scripting

xss

vulnerability

cve-2024-21584

nvd

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.

Affected configurations

Vulners

Node

pleasanterpleasanterMatch1.3.49.0

VendorProductVersionCPE
pleasanterpleasanter1.3.49.0cpe:2.3:a:pleasanter:pleasanter:1.3.49.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pleasanter	pleasanter	1.3.49.0	cpe:2.3:a:pleasanter:pleasanter:1.3.49.0:::::::*

CNA Affected

[
  {
    "vendor": "Implem Inc.",
    "product": "Pleasanter ",
    "versions": [
      {
        "version": "1.3.49.0 and earlier",
        "status": "affected"
      }
    ]
  }
]