Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-3589 EUVD-2023-44239GHSA-wwv9-4fxw-2hvj

Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by 3DS

Vendor: Dassault Systèmes Product: Teamwork Cloud - Business Edition Product: Teamwork Cloud - Business Pro Edition Product: Teamwork Cloud - Enterprise Edition Product: Teamwork Cloud - Standard Edition

Description

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

Affected products

VendorProductAffectedFixed
Dassault Systèmes Teamwork Cloud - Business Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —
Dassault Systèmes Teamwork Cloud - Enterprise Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —
Dassault Systèmes Teamwork Cloud - Business Pro Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —
Dassault Systèmes Teamwork Cloud - Standard Edition No Magic Release 2021x Golden – ≤ No Magic Release 2021x Refresh2, No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 —

References