JVN#96209256: Multiple vulnerabilities in Pleasanter

Pleasanter provided by Implem Inc. contains multiple vulnerabilities listed below.

Stored cross-site scripting vulnerability (CWE-79) - CVE-2023-34439

Improper access control vulnerability (CWE-284) - CVE-2023-45210

Open redirect vulnerability (CWE-601) - CVE-2023-46688

Authentication bypass vulnerability by SAML (CWE-289) - CVE-2023-41890
This issue is caused by a vulnerability in Sustainsys.Saml2 library used in the product.

Impact

• An arbitrary script may be executed on the user’s web browser - CVE-2023-34439
• A user may view the temporary files uploaded by other users that are not permitted to access - CVE-2023-45210
• When accessing a specially crafted URL under certain conditions, the user may be redirected to an arbitrary website - CVE-2023-46688
• A remote attacker may impersonate a legitimate user, and log in to the system that uses the product - CVE-2019-5966

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.
The developer has released the following versions that contain fixes for the vulnerabilities.

CVE-2023-34439, CVE-2023-45210, CVE-2023-46688

• Pleasanter 1.3.48.0
  CVE-2023-41890

• Pleasanter 1.3.47.0

Products Affected

CVE-2023-34439, CVE-2023-45210, CVE-2023-46688

• Pleasanter 1.3.47.0 and earlier versions
  CVE-2023-41890

• Pleasanter 1.3.46.1 and earlier versions which use SAML (Security Assertion Markup Language) authentication
  The developer states that the product’s both Community Edition and Enterprise Edition are affected.