Vulnerability CVE-2023-4296
Published: 2023-08-29   Modified: 2023-08-30

Description:

?If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

See advisories in our WLB2 database:
Topic
Author
Date
Low
PTC - Codebeamer Cross Site Scripting
Niklas Schilling
18.09.2023

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://codebeamer.com/cb/wiki/31346480
https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01
Copyright 2024, cxsecurity.com

 

Back to Top