« Volver al listado

CVE-2023-3589

Estado: ModificadaAlta (7.5)—

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

3DS — Teamwork Cloud NO Magic Release

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-3589",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-3589",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-19T14:28:44.230042Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "3DS.Information-Security@3ds.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.6
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "3DS.Information-Security@3ds.com",
      "affectedData": [
        {
          "vendor": "Dassault Systèmes",
          "product": "Teamwork Cloud - Business Edition",
          "versions": [
            {
              "status": "affected",
              "version": "No Magic Release 2021x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2021x Refresh2"
            },
            {
              "status": "affected",
              "version": "No Magic Release 2022x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2022x Refresh2"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Dassault Systèmes",
          "product": "Teamwork Cloud - Enterprise Edition",
          "versions": [
            {
              "status": "affected",
              "version": "No Magic Release 2021x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2021x Refresh2"
            },
            {
              "status": "affected",
              "version": "No Magic Release 2022x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2022x Refresh2"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Dassault Systèmes",
          "product": "Teamwork Cloud - Business Pro Edition",
          "versions": [
            {
              "status": "affected",
              "version": "No Magic Release 2021x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2021x Refresh2"
            },
            {
              "status": "affected",
              "version": "No Magic Release 2022x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2022x Refresh2"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Dassault Systèmes",
          "product": "Teamwork Cloud - Standard Edition",
          "versions": [
            {
              "status": "affected",
              "version": "No Magic Release 2021x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2021x Refresh2"
            },
            {
              "status": "affected",
              "version": "No Magic Release 2022x Golden",
              "versionType": "custom",
              "lessThanOrEqual": "No Magic Release 2022x Refresh2"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:dassult:teamwork_cloud_business_edition:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dassult",
          "product": "teamwork_cloud_business_edition",
          "versions": [
            {
              "status": "affected",
              "version": "no_magic_release_2021x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release_2021X_refresh2"
            },
            {
              "status": "affected",
              "version": "no_magic_release_2022x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release_2022x_refresh2"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:dassult:teamwork_cloud_business_pro_edition:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dassult",
          "product": "teamwork_cloud_business_pro_edition",
          "versions": [
            {
              "status": "affected",
              "version": "no_magic_release_2021x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release_2021x_refresh2"
            },
            {
              "status": "affected",
              "version": "no_magic_release_2022x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release2022x_refresh2"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:dassault:teamwork_cloud_standard_edition:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dassault",
          "product": "teamwork_cloud_standard_edition",
          "versions": [
            {
              "status": "affected",
              "version": "no_magic_release_2021x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release_2021x_refresh2"
            },
            {
              "status": "affected",
              "version": "no_magic_release_2022x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release_2022x_refresh2"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:dassault:teamwork_cloud_enterprise_edition:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dassault",
          "product": "teamwork_cloud_enterprise_edition",
          "versions": [
            {
              "status": "affected",
              "version": "no_magic_release_2021x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release_2021_refresh2"
            },
            {
              "status": "affected",
              "version": "no_magic_release_2022x_golden",
              "versionType": "custom",
              "lessThanOrEqual": "no_magic_release_2022_refresh2"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-10-09T09:15:10.507",
  "references": [
    {
      "url": "https://www.3ds.com/vulnerability/advisories",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "source": "3DS.Information-Security@3ds.com"
    },
    {
      "url": "https://www.3ds.com/vulnerability/advisories",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "3DS.Information-Security@3ds.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) que afecta a Teamwork Cloud desde No Magic Release 2021x hasta No Magic Release 2022x podría permitir, con algunas condiciones muy específicas, que un atacante envíe una consulta específicamente manipulada al servidor."
    }
  ],
  "lastModified": "2026-06-17T06:14:24.940",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2021x:*:*:*:business:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3465527-6062-4671-932F-5AC8CB6CAE76"
            },
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2022x:*:*:*:business:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CBED6A07-495A-45E2-8670-6D0093E4E332"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2021x:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC55035D-9D34-4B26-9B89-BEF735AF0465"
            },
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2022x:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFEB98EE-3955-4A58-ACEE-59DDE97AFA34"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2021x:*:*:*:business_pro:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E7ADE53-CDAC-4135-A452-C81289828F47"
            },
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2022x:*:*:*:business_pro:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F10E179-1EAA-4C34-96DE-197F82EE2CA1"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2021x:*:*:*:standard:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1BBE2EE-6042-4F9C-A423-5BF8C58757F0"
            },
            {
              "criteria": "cpe:2.3:a:3ds:teamwork_cloud_no_magic_release:2022x:*:*:*:standard:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18C200BF-E20D-4FB7-83EA-24DBFA01D0BB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "3DS.Information-Security@3ds.com"
}