PatchTheCVEpleasanter vulnerabilities
Recent CVEs affecting pleasanter products. 4 tracked.
pleasanter has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-03-12. Highest priority: CVE-2023-46688 (score 32/100).
- CVE-2024-21584 MEDIUM 6.1 UPGRADE Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability
- CVE-2023-46688 MEDIUM 6.1 UPGRADE Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to red
- CVE-2023-45210 MEDIUM 4.3 UPGRADE Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote au
- CVE-2023-34439 MEDIUM 5.4 UPGRADE Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability
FAQ
How do I fix pleasanter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pleasanter being exploited right now?
None of the tracked pleasanter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pleasanter CVE should I patch first?
CVE-2023-46688 currently ranks highest (32/100): Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to red.