Medium · 6.1 CVE-2023-1996 EUVD-2023-24176GHSA-9464-hjjc-4v8w

Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x

Published May 19, 2023 · Updated Feb 12, 2025 · Assigned by 3DS

Vendor: Dassault Systèmes Product: 3DEXPERIENCE

Description

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

Affected products

Vendor	Product	Affected	Fixed
Dassault Systèmes	3DEXPERIENCE	Release 3DEXPERIENCE R2018x - All levels, Release 3DEXPERIENCE R2019x - All levels, Release 3DEXPERIENCE R2020x Golden – ≤ Release 3DEXPERIENCE R2020x.FP.CFA.2303, Release 3DEXPERIENCE R2021x Golden – ≤ Release 3DEXPERIENCE R2021x.FP.CFA.2306, Release 3DEXPERIENCE R2022x Golden – ≤ Release 3DEXPERI…	—

References

https://www.3ds.com/vulnerability/advisories