← CVE Intelligence

CVE-2023-3589

Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x PUBLISHED

Description (CNA)

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / Teamwork Cloud - Business Editionaffected No Magic Release 2021x Golden through No Magic Release 2021x Refresh2; affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2
Dassault Systèmes / Teamwork Cloud - Enterprise Editionaffected No Magic Release 2021x Golden through No Magic Release 2021x Refresh2; affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2
Dassault Systèmes / Teamwork Cloud - Business Pro Editionaffected No Magic Release 2021x Golden through No Magic Release 2021x Refresh2; affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2
Dassault Systèmes / Teamwork Cloud - Standard Editionaffected No Magic Release 2021x Golden through No Magic Release 2021x Refresh2; affected No Magic Release 2022x Golden through No Magic Release 2022x Refresh2

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.