exploitDog

CVE-2023-30758

Опубликовано: 01 июн. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

Ссылки

https://github.com/Implem/Implem.Pleasanter/issues/474
Exploit
Issue Tracking
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN62111727/
Third Party Advisory
https://pleasanter.org/archives/vulnerability-update-202305
Patch
Vendor Advisory
https://github.com/Implem/Implem.Pleasanter/issues/474
Exploit
Issue Tracking
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN62111727/
Third Party Advisory
https://pleasanter.org/archives/vulnerability-update-202305
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pleasanter:pleasanter:*:*:*:*:*:*:*:*

Версия до 1.3.38.1 (исключая)

EPSS

Процентиль: 46%

0.00236

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-hfqc-52hc-55rq

CVSS3: 5.4

github

больше 2 лет назад

Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

EPSS

Процентиль: 46%

0.00236

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79