CVE-2023-32607

2023-06-3003:15:09

Google

osv.dev

cve-2023-32607

cross-site scripting

pleasanter

remote attacker

software vulnerability

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

JSON

Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.

CPENameOperatorVersion
implem.pleasantereqPleasanter_1.3.29.0
implem.pleasantereqPleasanter_1.3.4.1
implem.pleasantereqPleasanter_1.3.4.0
implem.pleasantereqPleasanter_1.2.11.0
implem.pleasantereqPleasanter_1.3.2.0
implem.pleasantereqPleasanter_1.2.28.1
implem.pleasantereqPleasanter_1.2.26.0
implem.pleasantereqPleasanter_1.2.22.0
implem.pleasantereqRelease_1180
implem.pleasantereqPleasanter_1.3.17.0

Name	Operator	Version
implem.pleasanter	eq	Pleasanter_1.3.29.0
implem.pleasanter	eq	Pleasanter_1.3.4.1
implem.pleasanter	eq	Pleasanter_1.3.4.0
implem.pleasanter	eq	Pleasanter_1.2.11.0
implem.pleasanter	eq	Pleasanter_1.3.2.0
implem.pleasanter	eq	Pleasanter_1.2.28.1
implem.pleasanter	eq	Pleasanter_1.2.26.0
implem.pleasanter	eq	Pleasanter_1.2.22.0
implem.pleasanter	eq	Release_1180
implem.pleasanter	eq	Pleasanter_1.3.17.0