PT-2023-30160 · Unknown · Pleasanter

Yoichi Tsuzuki

·

CVE-2023-46688

·

Published

2023-12-06

·

Updated

2023-12-11

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Pleasanter versions 1.3.47.0 and earlier
Description The issue allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. This can be achieved by exploiting an open redirect vulnerability.
Recommendations For Pleasanter versions 1.3.47.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Open Redirect

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2023-46688

Affected Products

Pleasanter