Lucene search

[email protected]CVE-2023-3589

HistoryOct 09, 2023 - 9:15 a.m.

CVE-2023-3589

2023-10-0909:15:10

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-3589

cross-site request forgery

csrf

teamwork cloud

no magic release

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

24.3%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

Affected configurations

NVD

Node

3dsteamwork_cloud_no_magic_releaseMatch2021xbusiness

3dsteamwork_cloud_no_magic_releaseMatch2022xbusiness

Node

3dsteamwork_cloud_no_magic_releaseMatch2021xenterprise

3dsteamwork_cloud_no_magic_releaseMatch2022xenterprise

Node

3dsteamwork_cloud_no_magic_releaseMatch2021xbusiness_pro

3dsteamwork_cloud_no_magic_releaseMatch2022xbusiness_pro

Node

3dsteamwork_cloud_no_magic_releaseMatch2021xstandard

3dsteamwork_cloud_no_magic_releaseMatch2022xstandard

CPENameOperatorVersion
3ds:teamwork_cloud_no_magic_release3ds teamwork cloud no magic releaseeq2021x
3ds:teamwork_cloud_no_magic_release3ds teamwork cloud no magic releaseeq2022x

CPE	Name	Operator	Version
3ds:teamwork_cloud_no_magic_release	3ds teamwork cloud no magic release	eq	2021x
3ds:teamwork_cloud_no_magic_release	3ds teamwork cloud no magic release	eq	2022x

CNA Affected

[
  {
    "vendor": "Dassault Systèmes",
    "product": "Teamwork Cloud - Business Edition",
    "versions": [
      {
        "status": "affected",
        "version": "No Magic Release 2021x Golden",
        "lessThanOrEqual": "No Magic Release 2021x Refresh2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "No Magic Release 2022x Golden",
        "lessThanOrEqual": "No Magic Release 2022x Refresh2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Dassault Systèmes",
    "product": "Teamwork Cloud - Enterprise Edition",
    "versions": [
      {
        "status": "affected",
        "version": "No Magic Release 2021x Golden",
        "lessThanOrEqual": "No Magic Release 2021x Refresh2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "No Magic Release 2022x Golden",
        "lessThanOrEqual": "No Magic Release 2022x Refresh2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Dassault Systèmes",
    "product": "Teamwork Cloud - Business Pro Edition",
    "versions": [
      {
        "status": "affected",
        "version": "No Magic Release 2021x Golden",
        "lessThanOrEqual": "No Magic Release 2021x Refresh2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "No Magic Release 2022x Golden",
        "lessThanOrEqual": "No Magic Release 2022x Refresh2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Dassault Systèmes",
    "product": "Teamwork Cloud - Standard Edition",
    "versions": [
      {
        "status": "affected",
        "version": "No Magic Release 2021x Golden",
        "lessThanOrEqual": "No Magic Release 2021x Refresh2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "No Magic Release 2022x Golden",
        "lessThanOrEqual": "No Magic Release 2022x Refresh2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.3ds.com/vulnerability/advisories

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

24.3%

JSON

Related for CVE-2023-3589

prion1 cvelist1 nvd1