CVE-2023-34439

Summary

CVE-2023-34439 is a stored cross-site scripting (XSS) vulnerability affecting Pleasanter version 1.3.47.0 and older. This issue allows an attacker to inject malicious scripts into a web application, which can then be executed on unsuspecting users' web browsers when they view a specially crafted page. Successful exploitation of this vulnerability could lead to various attacks, including data theft, session hijacking, or even complete takeover of the affected user's account. Users are strongly advised to update their Pleasanter installation as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.