CVE-2023-3588

MEDIUM 5.4

Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

CWE	CWE-79
Vendor	dassault systèmes
Product	teamwork cloud - business edition
Published	Sep 13, 2023
Last Updated	Aug 2, 2024

Stay Ahead of the Next One

Get instant alerts for dassault systèmes teamwork cloud - business edition

Be the first to know when new medium vulnerabilities affecting dassault systèmes teamwork cloud - business edition are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

Dassault Systèmes / Teamwork Cloud - Business Edition

No Magic Release 2021x Golden ≤ No Magic Release 2021x Refresh2 No Magic Release 2022x Golden ≤ No Magic Release 2022x Refresh2

Dassault Systèmes / Teamwork Cloud - Enterprise Edition

No Magic Release 2021x Golden ≤ No Magic Release 2021x Refresh2 No Magic Release 2022x Golden ≤ No Magic Release 2022x Refresh2

Dassault Systèmes / Teamwork Cloud - Business Pro Edition

No Magic Release 2021x Golden ≤ No Magic Release 2021x Refresh2 No Magic Release 2022x Golden ≤ No Magic Release 2022x Refresh2

Dassault Systèmes / Teamwork Cloud - Standard Edition

No Magic Release 2021x Golden ≤ No Magic Release 2021x Refresh2 No Magic Release 2022x Golden ≤ No Magic Release 2022x Refresh2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

3ds.com: https://www.3ds.com/vulnerability/advisories

Credits

Johannes Rückert from mgm security partners GmbH