CVE-2023-3588

Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

State: Published
Severity: 5.4 Medium
Published: Sep 13, 2023
Updated: Aug 2, 2024
Reserved: Jul 10, 2023

Read the record on cve.org

Description

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

Scores

CVSS	Score	Vector	Source
3.1	5.4 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N	3DS

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
Teamwork Cloud - Business EditionDassault Systèmes	No Magic Release 2021x Golden through No Magic Release 2021x Refresh2Affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2Affected
Teamwork Cloud - Enterprise EditionDassault Systèmes	No Magic Release 2021x Golden through No Magic Release 2021x Refresh2Affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2Affected
Teamwork Cloud - Business Pro EditionDassault Systèmes	No Magic Release 2021x Golden through No Magic Release 2021x Refresh2Affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2Affected
Teamwork Cloud - Standard EditionDassault Systèmes	No Magic Release 2021x Golden through No Magic Release 2021x Refresh2Affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2Affected

References

https://www.3ds.com/vulnerability/advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.