CVE-2023-32608

2023-06-3003:15:09

Google

osv.dev

directory traversal

pleasanter

remote attacker

arbitrary file

server vulnerability

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.7%

JSON

Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server.

CPENameOperatorVersion
implem.pleasantereqPleasanter_1.3.29.0
implem.pleasantereqPleasanter_1.3.4.1
implem.pleasantereqPleasanter_1.3.4.0
implem.pleasantereqPleasanter_1.2.11.0
implem.pleasantereqPleasanter_1.3.2.0
implem.pleasantereqPleasanter_1.2.28.1
implem.pleasantereqPleasanter_1.2.26.0
implem.pleasantereqPleasanter_1.2.22.0
implem.pleasantereqRelease_1180
implem.pleasantereqPleasanter_1.3.17.0

Name	Operator	Version
implem.pleasanter	eq	Pleasanter_1.3.29.0
implem.pleasanter	eq	Pleasanter_1.3.4.1
implem.pleasanter	eq	Pleasanter_1.3.4.0
implem.pleasanter	eq	Pleasanter_1.2.11.0
implem.pleasanter	eq	Pleasanter_1.3.2.0
implem.pleasanter	eq	Pleasanter_1.2.28.1
implem.pleasanter	eq	Pleasanter_1.2.26.0
implem.pleasanter	eq	Pleasanter_1.2.22.0
implem.pleasanter	eq	Release_1180
implem.pleasanter	eq	Pleasanter_1.3.17.0