Lucene search

K
nvd[email protected]NVD:CVE-2023-4296
HistoryAug 29, 2023 - 10:15 p.m.

CVE-2023-4296

2023-08-2922:15:09
CWE-79
web.nvd.nist.gov
cve-2023-4296
admin user
code injection
ptc codebeamer
malicious link
target device
browser execution

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

Affected configurations

NVD
Node
intlandcodebeamerMatch21.09.0-
OR
intlandcodebeamerMatch21.09.0sp1
OR
intlandcodebeamerMatch21.09.0sp10
OR
intlandcodebeamerMatch21.09.0sp11
OR
intlandcodebeamerMatch21.09.0sp12
OR
intlandcodebeamerMatch21.09.0sp13
OR
intlandcodebeamerMatch21.09.0sp2
OR
intlandcodebeamerMatch21.09.0sp3
OR
intlandcodebeamerMatch21.09.0sp4
OR
intlandcodebeamerMatch21.09.0sp5
OR
intlandcodebeamerMatch21.09.0sp6
OR
intlandcodebeamerMatch21.09.0sp7
OR
intlandcodebeamerMatch21.09.0sp8
OR
intlandcodebeamerMatch21.09.0sp9
OR
intlandcodebeamerMatch22.04.0-
OR
intlandcodebeamerMatch22.04.0sp1
OR
intlandcodebeamerMatch22.04.0sp2
OR
intlandcodebeamerMatch22.04.0sp3
OR
intlandcodebeamerMatch22.04.0sp4
OR
intlandcodebeamerMatch22.04.0sp5
OR
intlandcodebeamerMatch22.10.0-
OR
intlandcodebeamerMatch22.10.0sp1
OR
intlandcodebeamerMatch22.10.0sp2
OR
intlandcodebeamerMatch22.10.0sp3
OR
intlandcodebeamerMatch22.10.0sp4
OR
intlandcodebeamerMatch22.10.0sp5
OR
intlandcodebeamerMatch22.10.0sp6
OR
intlandcodebeamerMatch22.10.0sp7
OR
intlandcodebeamerMatch22.10.0sp8

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

Related for NVD:CVE-2023-4296