PatchTheCVEpleasanter vulnerabilities and fixes
Recent CVEs affecting pleasanter, with upgrade or downgrade steps. 5 tracked.
pleasanter has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-03-12. Highest priority: CVE-2023-30758 (score 37/100).
- CVE-2024-21584 MEDIUM 6.1 UPGRADE Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability
- CVE-2023-46688 MEDIUM 6.1 UPGRADE Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to red
- CVE-2023-45210 MEDIUM 4.3 UPGRADE Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote au
- CVE-2023-34439 MEDIUM 5.4 UPGRADE Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability
- CVE-2023-30758 MEDIUM 5.4 UPGRADE Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker t
FAQ
How do I fix pleasanter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pleasanter being exploited right now?
None of the tracked pleasanter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pleasanter CVE should I patch first?
CVE-2023-30758 currently ranks highest (37/100): Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker t.