?If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html | |
| http://seclists.org/fulldisclosure/2023/Sep/10 | |
| https://codebeamer.com/cb/wiki/31346480 | Vendor Advisory |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01 | Third Party Advisory US Government Resource |
| http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html | |
| http://seclists.org/fulldisclosure/2023/Sep/10 | |
| https://codebeamer.com/cb/wiki/31346480 | Vendor Advisory |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:34
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | () http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html - | |
| References | () http://seclists.org/fulldisclosure/2023/Sep/10 - | |
| References | () https://codebeamer.com/cb/wiki/31346480 - Vendor Advisory | |
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01 - Third Party Advisory, US Government Resource |
18 Sep 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Sep 2023, 14:50
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Intland
Intland codebeamer |
|
| References | (MISC) https://codebeamer.com/cb/wiki/31346480 - Vendor Advisory | |
| References | (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01 - Third Party Advisory, US Government Resource | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CPE | cpe:2.3:a:intland:codebeamer:22.10.0:sp2:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp9:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:sp6:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:-:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.04.0:sp2:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.04.0:sp1:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp11:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.04.0:sp3:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:sp4:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:sp1:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp13:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp3:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:sp3:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:sp8:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp12:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp6:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp2:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.04.0:sp4:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:-:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.04.0:-:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp1:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp8:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp10:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.04.0:sp5:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp7:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:sp7:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp5:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:21.09.0:sp4:*:*:*:*:*:* cpe:2.3:a:intland:codebeamer:22.10.0:sp5:*:*:*:*:*:* |
29 Aug 2023, 23:49
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-29 22:15
Updated : 2024-11-21 08:34
NVD link : CVE-2023-4296
Mitre link : CVE-2023-4296
CVE.ORG link : CVE-2023-4296
JSON object : View
Products Affected
intland
- codebeamer
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')