CVE-2023-3589

Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Published Oct 9, 2023 CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Description
A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-44239 A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.
History
Type Values Removed Values Added
First Time appeared Dassault
Dassault teamwork Cloud Enterprise Edition
Dassault teamwork Cloud Standard Edition
Dassult
Dassult teamwork Cloud Business Edition
Dassult teamwork Cloud Business Pro Edition
CPEs cpe:2.3:a:dassault:teamwork_cloud_enterprise_edition:*:*:*:*:*:*:*:*
cpe:2.3:a:dassault:teamwork_cloud_standard_edition:*:*:*:*:*:*:*:*
cpe:2.3:a:dassult:teamwork_cloud_business_edition:*:*:*:*:*:*:*:*
cpe:2.3:a:dassult:teamwork_cloud_business_pro_edition:*:*:*:*:*:*:*:*
Vendors & Products Dassault
Dassault teamwork Cloud Enterprise Edition
Dassault teamwork Cloud Standard Edition
Dassult
Dassult teamwork Cloud Business Edition
Dassult teamwork Cloud Business Pro Edition
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}