CVE-2023-4296

CVSS V2 None CVSS V3 None
Description
​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
Overview
  • CVE ID
  • CVE-2023-4296
  • Assigner
  • icscert
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-08-29T21:42:48.880Z
  • Last Modified Date
  • 2023-08-31T14:44:51.524Z
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
References
Reference URL Reference Tags
https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01
https://codebeamer.com/cb/wiki/31346480
http://seclists.org/fulldisclosure/2023/Sep/10
http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-4296
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4296
History
Created Old Value New Value Data Type Notes
2024-06-24 20:08:28 Added to TrackCVE