Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-3588 EUVD-2023-44238GHSA-7r9m-wfjg-4hqh

Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Published Sep 13, 2023 · Updated Aug 2, 2024 · Assigned by 3DS

Vendor: Dassault Systèmes Product: Teamwork Cloud - Business Edition Product: Teamwork Cloud - Business Pro Edition Product: Teamwork Cloud - Enterprise Edition Product: Teamwork Cloud - Standard Edition

Description

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

Affected products

VendorProductAffectedFixed
Dassault Systèmes Teamwork Cloud - Business Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —
Dassault Systèmes Teamwork Cloud - Enterprise Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —
Dassault Systèmes Teamwork Cloud - Business Pro Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —
Dassault Systèmes Teamwork Cloud - Standard Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —

References