Podatność CVE-2023-34439
Publikacja: 2023-12-06   Modyfikacja: 2023-12-14

Opis:
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.

Typ:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Affected software
Pleasanter -> Pleasanter 

 Referencje:
https://pleasanter.org/archives/vulnerability-update-202311
https://jvn.jp/en/jp/JVN96209256/
Copyright 2024, cxsecurity.com

 

Back to Top