CVE-2024-21584

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-12 · updated 2026-06-17
Weakness: CWE-79

Description

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.

Affected products

Implem Inc. Pleasanter: through 1.3.49.0

References

https://jvn.jp/en/jp/JVN51135247/
https://pleasanter.org/archives/vulnerability-update-202401
https://jvn.jp/en/jp/JVN51135247/
https://pleasanter.org/archives/vulnerability-update-202401

Get alerted when CVE-2024-21584 or the next vulnerability affects your stack