CVE-2023-3588 MEDIUM

CVE-2023-3588: Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Vendor Dassault Systèmes
Product Teamwork Cloud - Business Edition
Weakness CWE-79 · XSS
Published September 13, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

Key dates

02Disclosure timeline

September 13, 2023 CVE published
August 2, 2024 Record updated