Skip to content
OpenAdvisories
High · 8.8 CVE-2023-4296 EUVD-2023-54167GHSA-qj2q-gqrj-fh7g

PTC Codebeamer Cross site scripting

Published Aug 29, 2023 · Updated Feb 13, 2025 · Assigned by icscert

Description

​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

Affected products

VendorProductAffectedFixed
PTC Codebeamer ≤ v22.10-SP7, ≤ v22.04-SP5, ≤ v21.09-SP13 2.0

Advisories 1

References