Description

Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server.

Classification

CVE ID: CVE-2023-32608

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: Implem Inc.

Product: Pleasanter (Community Edition and Enterprise Edition)

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.1% (probability of being exploited)

EPSS Percentile: 42.71% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://pleasanter.org/archives/vulnerability-update-202306
https://jvn.jp/en/jp/JVN97818024/

Timeline