If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html | |
| http://seclists.org/fulldisclosure/2023/Sep/10 | |
| https://codebeamer.com/cb/wiki/31346480 | Vendor Advisory |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01 | Third Party Advisory US Government Resource |
| http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html | |
| http://seclists.org/fulldisclosure/2023/Sep/10 | |
| https://codebeamer.com/cb/wiki/31346480 | Vendor Advisory |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
13 Feb 2025, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device. |
Information
Published : 2023-08-29 22:15
Updated : 2025-02-13 17:17
NVD link : CVE-2023-4296
Mitre link : CVE-2023-4296
CVE.ORG link : CVE-2023-4296
JSON object : View
Products Affected
intland
- codebeamer
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')