CVE-2023-3588mediumCWE-79

Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.3%

probabilidade de exploração

0.3%top 78% das CVEs

exploração observada

nãonenhuma fonte reporta

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Produtos afetados

Dassault Systèmes · Teamwork Cloud - Business Edition Dassault Systèmes · Teamwork Cloud - Business Pro Edition Dassault Systèmes · Teamwork Cloud - Enterprise Edition Dassault Systèmes · Teamwork Cloud - Standard Edition

Referências

https://www.3ds.com/vulnerability/advisories