Implem Inc. Pleasanter (Community Edition and Enterprise Edition)

• CVE-2023-32608 Unrated Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server 1.2%
• CVE-2023-32607 Unrated Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script. 0.5%