6.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, при специфични условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.
Засегнати продукти
- Dassault Systèmes Teamwork Cloud - Business Edition: No Magic Release 2021x Golden до No Magic Release 2021x Refresh2; No Magic Release 2022x Golden до No Magic Release 2022x Refresh2
- Dassault Systèmes Teamwork Cloud - Enterprise Edition: No Magic Release 2021x Golden до No Magic Release 2021x Refresh2; No Magic Release 2022x Golden до No Magic Release 2022x Refresh2
- Dassault Systèmes Teamwork Cloud - Business Pro Edition: No Magic Release 2021x Golden до No Magic Release 2021x Refresh2; No Magic Release 2022x Golden до No Magic Release 2022x Refresh2
- Dassault Systèmes Teamwork Cloud - Standard Edition: No Magic Release 2021x Golden до No Magic Release 2021x Refresh2; No Magic Release 2022x Golden до No Magic Release 2022x Refresh2
- dassult teamwork_cloud_business_edition: no_magic_release_2021x_golden до no_magic_release_2021X_refresh2; no_magic_release_2022x_golden до no_magic_release_2022x_refresh2
- dassult teamwork_cloud_business_pro_edition: no_magic_release_2021x_golden до no_magic_release_2021x_refresh2; no_magic_release_2022x_golden до no_magic_release2022x_refresh2
- dassault teamwork_cloud_standard_edition: no_magic_release_2021x_golden до no_magic_release_2021x_refresh2; no_magic_release_2022x_golden до no_magic_release_2022x_refresh2
- dassault teamwork_cloud_enterprise_edition: no_magic_release_2021x_golden до no_magic_release_2021_refresh2; no_magic_release_2022x_golden до no_magic_release_2022_refresh2
Вид слабост
История
- 9 октомври 2023 Публикувано