CVE-2023-4296

PTC Codebeamer Cross site scripting

Severity Score

6.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

?Si un atacante engaña a un usuario administrador de PTC Codebeamer para que haga clic en un vínculo malicioso, puede permitir que el atacante inyecte código arbitrario para que se ejecute en el navegador del dispositivo de destino.

PTC - Codebeamer versions 22.10-SP7 and below, 22.04-SP5 and below, and 21.09-SP13 and below suffer from a cross site scripting vulnerability.

*Credits: Niklas Schilling of SEC Consult Vulnerability Lab reported this vulnerability to CISA.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-08-10 CVE Reserved
2023-08-29 CVE Published
2024-08-02 CVE Updated
2024-09-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (4)

URL	Tag	Source
http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2023/Sep/10
https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://codebeamer.com/cb/wiki/31346480	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		-		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp1		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp10		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp11		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp12		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp13		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp2		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp3		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp4		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp5		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp6		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp7		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp8		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				21.09.0 Search vendor "Intland" for product "Codebeamer" and version "21.09.0"		sp9		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.04.0 Search vendor "Intland" for product "Codebeamer" and version "22.04.0"		-		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.04.0 Search vendor "Intland" for product "Codebeamer" and version "22.04.0"		sp1		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.04.0 Search vendor "Intland" for product "Codebeamer" and version "22.04.0"		sp2		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.04.0 Search vendor "Intland" for product "Codebeamer" and version "22.04.0"		sp3		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.04.0 Search vendor "Intland" for product "Codebeamer" and version "22.04.0"		sp4		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.04.0 Search vendor "Intland" for product "Codebeamer" and version "22.04.0"		sp5		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		-		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp1		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp2		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp3		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp4		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp5		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp6		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp7		Affected
Intland Search vendor "Intland"		Codebeamer Search vendor "Intland" for product "Codebeamer"				22.10.0 Search vendor "Intland" for product "Codebeamer" and version "22.10.0"		sp8		Affected