CVE-2023-3589 - Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Back Back to CVE browser

HIGH

Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Published Oct 9, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.20%

Description

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

Affected products

Vendor Dassault Systèmes Product Teamwork Cloud - Business Edition Default
unaffected
- Version
  No Magic Release 2021x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2021x Refresh2
- Version
  No Magic Release 2022x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2022x Refresh2
Vendor Dassault Systèmes Product Teamwork Cloud - Business Pro Edition Default
unaffected
- Version
  No Magic Release 2021x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2021x Refresh2
- Version
  No Magic Release 2022x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2022x Refresh2
Vendor Dassault Systèmes Product Teamwork Cloud - Enterprise Edition Default
unaffected
- Version
  No Magic Release 2021x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2021x Refresh2
- Version
  No Magic Release 2022x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2022x Refresh2
Vendor Dassault Systèmes Product Teamwork Cloud - Standard Edition Default
unaffected
- Version
  No Magic Release 2021x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2021x Refresh2
- Version
  No Magic Release 2022x Golden
  Status
  affected
  Constraints
  <=No Magic Release 2022x Refresh2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dassault Systèmes

Teamwork Cloud - Business Edition

unaffected

Version	Status	Constraints
No Magic Release 2021x Golden	affected	<=No Magic Release 2021x Refresh2
No Magic Release 2022x Golden	affected	<=No Magic Release 2022x Refresh2

Dassault Systèmes

Teamwork Cloud - Business Pro Edition

unaffected

Version	Status	Constraints
No Magic Release 2021x Golden	affected	<=No Magic Release 2021x Refresh2
No Magic Release 2022x Golden	affected	<=No Magic Release 2022x Refresh2

Dassault Systèmes

Teamwork Cloud - Enterprise Edition

unaffected

Version	Status	Constraints
No Magic Release 2021x Golden	affected	<=No Magic Release 2021x Refresh2
No Magic Release 2022x Golden	affected	<=No Magic Release 2022x Refresh2

Dassault Systèmes

Teamwork Cloud - Standard Edition

unaffected

Version	Status	Constraints
No Magic Release 2021x Golden	affected	<=No Magic Release 2021x Refresh2
No Magic Release 2022x Golden	affected	<=No Magic Release 2022x Refresh2

Vendor Dassault Product Teamwork Cloud Enterprise Edition Default
n/a
- Version
  no_magic_release_2021x_golden
  Status
  affected
  Constraints
  <=no_magic_release_2021_refresh2
- Version
  no_magic_release_2022x_golden
  Status
  affected
  Constraints
  <=no_magic_release_2022_refresh2
Vendor Dassault Product Teamwork Cloud Standard Edition Default
n/a
- Version
  no_magic_release_2021x_golden
  Status
  affected
  Constraints
  <=no_magic_release_2021x_refresh2
- Version
  no_magic_release_2022x_golden
  Status
  affected
  Constraints
  <=no_magic_release_2022x_refresh2
Vendor Dassult Product Teamwork Cloud Business Edition Default
n/a
- Version
  no_magic_release_2021x_golden
  Status
  affected
  Constraints
  <=no_magic_release_2021X_refresh2
- Version
  no_magic_release_2022x_golden
  Status
  affected
  Constraints
  <=no_magic_release_2022x_refresh2
Vendor Dassult Product Teamwork Cloud Business Pro Edition Default
n/a
- Version
  no_magic_release_2021x_golden
  Status
  affected
  Constraints
  <=no_magic_release_2021x_refresh2
- Version
  no_magic_release_2022x_golden
  Status
  affected
  Constraints
  <=no_magic_release2022x_refresh2