CVE-2023-4296
29.08.2023, 22:15
If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
| Vendor | Product | Version |
|---|---|---|
| intland | codebeamer | 21.09.0 |
| intland | codebeamer | 21.09.0:sp1 |
| intland | codebeamer | 21.09.0:sp10 |
| intland | codebeamer | 21.09.0:sp11 |
| intland | codebeamer | 21.09.0:sp12 |
| intland | codebeamer | 21.09.0:sp13 |
| intland | codebeamer | 21.09.0:sp2 |
| intland | codebeamer | 21.09.0:sp3 |
| intland | codebeamer | 21.09.0:sp4 |
| intland | codebeamer | 21.09.0:sp5 |
| intland | codebeamer | 21.09.0:sp6 |
| intland | codebeamer | 21.09.0:sp7 |
| intland | codebeamer | 21.09.0:sp8 |
| intland | codebeamer | 21.09.0:sp9 |
| intland | codebeamer | 22.04.0 |
| intland | codebeamer | 22.04.0:sp1 |
| intland | codebeamer | 22.04.0:sp2 |
| intland | codebeamer | 22.04.0:sp3 |
| intland | codebeamer | 22.04.0:sp4 |
| intland | codebeamer | 22.04.0:sp5 |
| intland | codebeamer | 22.10.0 |
| intland | codebeamer | 22.10.0:sp1 |
| intland | codebeamer | 22.10.0:sp2 |
| intland | codebeamer | 22.10.0:sp3 |
| intland | codebeamer | 22.10.0:sp4 |
| intland | codebeamer | 22.10.0:sp5 |
| intland | codebeamer | 22.10.0:sp6 |
| intland | codebeamer | 22.10.0:sp7 |
| intland | codebeamer | 22.10.0:sp8 |
𝑥
= Vulnerable software versions
References