Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-3588

Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Description

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dassault Systèmes Teamwork Cloud - Business Edition

Default version status: unaffected

  • No Magic Release 2021x Golden to ≤ No Magic Release 2021x Refresh2affected
  • No Magic Release 2022x Golden to ≤ No Magic Release 2022x Refresh2affected

Dassault Systèmes Teamwork Cloud - Enterprise Edition

Default version status: unaffected

  • No Magic Release 2021x Golden to ≤ No Magic Release 2021x Refresh2affected
  • No Magic Release 2022x Golden to ≤ No Magic Release 2022x Refresh2affected

Dassault Systèmes Teamwork Cloud - Business Pro Edition

Default version status: unaffected

  • No Magic Release 2021x Golden to ≤ No Magic Release 2021x Refresh2affected
  • No Magic Release 2022x Golden to ≤ No Magic Release 2022x Refresh2affected

Dassault Systèmes Teamwork Cloud - Standard Edition

Default version status: unaffected

  • No Magic Release 2021x Golden to ≤ No Magic Release 2021x Refresh2affected
  • No Magic Release 2022x Golden to ≤ No Magic Release 2022x Refresh2affected

References