Lucene search

Teamwork Cloud No Magic Release Security Vulnerabilities

cve

CVE-2023-3588

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

5.4CVSS

5.4AI Score

0.001EPSS

2023-09-13 07:15 PM

cve

CVE-2023-3589

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

7.5CVSS

7.5AI Score

0.001EPSS

2023-10-09 09:15 AM