CVE-2023-32607

Summary

Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.

Affected Software

VendorProductVersion RangeStatus
Implem Inc.Pleasanter (Community Edition and Enterprise Edition)1.3.39.2 and earlier versionsaffected

Weaknesses

  • Cross-site scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References