Pleasanter
Approved changes feed: RSS · Atom
cpe:2.3:a:implem_inc.:pleasanter:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Implem Inc. (7c506865-d2ec-5bbd-8332-6c085d7657dd) |
|---|---|
| Product | Pleasanter (3ae60643-ed0b-51af-907e-27a9bed2170b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-61931 |
vulnerable | 2026-06-08 07:37:28.368891 |
Details available
MEDIUM (5.4)
Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser.
Published: 2025-10-24T05:17:30.940Z
Updated: 2025-10-24T12:31:22.740Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58070 |
vulnerable | 2026-06-08 07:35:17.035686 |
Details available
MEDIUM (6.1)
Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser.
Published: 2025-10-24T05:17:23.369Z
Updated: 2025-10-24T12:31:28.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21584 |
vulnerable | 2026-06-08 06:27:35.552795 |
Details available
Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.
Published: 2024-03-12T07:25:44.452Z
Updated: 2025-03-13T16:09:31.719Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46688 |
vulnerable | 2026-06-08 06:14:22.787213 |
Details available
Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL.
Published: 2023-12-06T08:40:47.953Z
Updated: 2024-08-02T20:53:20.878Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45210 |
vulnerable | 2026-06-08 06:12:42.293176 |
Details available
Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.
Published: 2023-12-06T08:40:41.155Z
Updated: 2025-05-28T15:49:58.291Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34439 |
vulnerable | 2026-06-08 06:06:25.615003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30758 |
vulnerable | 2026-06-08 06:04:40.953749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.