Vulnerabilities > CVE-2023-4296 - Unspecified vulnerability in Intland Codebeamer 21.09.0/22.04.0/22.10.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
?If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 29 |
References
- http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html
- http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2023/Sep/10
- http://seclists.org/fulldisclosure/2023/Sep/10
- https://codebeamer.com/cb/wiki/31346480
- https://codebeamer.com/cb/wiki/31346480
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01