pleasanter kayıtları
pleasanter üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-284 Improper Access Control1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
26İzleyin | CVE-2023-32608İstismar yok | Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote autpleasanter · pleasanter · CWE-22 | Orta6,5 | %1,129 Haz 2023 |
24İzleyin | CVE-2023-46688İstismar yok | Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web spleasanter · pleasanter · CWE-601 | Orta6,1 | %0,56 Ara 2023 |
24İzleyin | CVE-2024-21584İstismar yok | Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability.pleasanter · pleasanter · CWE-79 | Orta6,1 | %0,312 Mar 2024 |
21İzleyin | CVE-2023-30758İstismar yok | Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.pleasanter · pleasanter · CWE-79 | Orta5,4 | %0,631 May 2023 |
21İzleyin | CVE-2023-32607İstismar yok | Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a rpleasanter · pleasanter · CWE-79 | Orta5,4 | %0,529 Haz 2023 |
21İzleyin | CVE-2023-34439İstismar yok | Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability.pleasanter · pleasanter · CWE-79 | Orta5,4 | %0,36 Ara 2023 |
17İzleyin | CVE-2023-45210İstismar yok | Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view tpleasanter · pleasanter · CWE-284 | Orta4,3 | %0,56 Ara 2023 |
- CVE-2023-3260826İzleyin
Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote aut
OrtaCVSS 6,5İstismar yokEPSS %1pleasanter · pleasanter29 Haz 2023
- CVE-2023-4668824İzleyin
Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web s
OrtaCVSS 6,1İstismar yokEPSS %0pleasanter · pleasanter6 Ara 2023
- CVE-2024-2158424İzleyin
Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability.
OrtaCVSS 6,1İstismar yokEPSS %0pleasanter · pleasanter12 Mar 2024
- CVE-2023-3075821İzleyin
Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.
OrtaCVSS 5,4İstismar yokEPSS %0pleasanter · pleasanter31 May 2023
- CVE-2023-3260721İzleyin
Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a r
OrtaCVSS 5,4İstismar yokEPSS %0pleasanter · pleasanter29 Haz 2023
- CVE-2023-3443921İzleyin
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability.
OrtaCVSS 5,4İstismar yokEPSS %0pleasanter · pleasanter6 Ara 2023
- CVE-2023-4521017İzleyin
Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view t
OrtaCVSS 4,3İstismar yokEPSS %0pleasanter · pleasanter6 Ara 2023