vuln-nvd/data/2023/CVE-2023-4296.json

{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Codebeamer","vendor":"PTC","versions":[{"lessThanOrEqual":"v22.10-SP7","status":"affected","version":"0","versionType":"custom"},{"lessThanOrEqual":"v22.04-SP5","status":"affected","version":"0","versionType":"custom"},{"lessThanOrEqual":"v21.09-SP13","status":"affected","version":"0","versionType":"custom"},{"status":"unaffected","version":"2.0"}]}],"source":"ics-cert@hq.dhs.gov"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:-:*:*:*:*:*:*","matchCriteriaId":"D8842BD8-5ADE-4F4C-892B-C7FD0BD00549","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4A96C543-780C-4FB8-9B66-E3A970284157","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp10:*:*:*:*:*:*","matchCriteriaId":"869FDFD2-B254-46F1-977C-8C45FC53CF4C","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp11:*:*:*:*:*:*","matchCriteriaId":"E162A5AA-DF07-4DB9-A0ED-15CD181B3E8B","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp12:*:*:*:*:*:*","matchCriteriaId":"61E616EF-4DD8-4F24-8132-069D1839CC44","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp13:*:*:*:*:*:*","matchCriteriaId":"4E1FFA2A-5A02-4D3E-AF1A-49F9CB751B29","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp2:*:*:*:*:*:*","matchCriteriaId":"8EC6A60D-1117-45A3-B64F-6A3C99CCCBF2","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp3:*:*:*:*:*:*","matchCriteriaId":"82586B4B-1876-4F6A-903A-B89A50CB13DC","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp4:*:*:*:*:*:*","matchCriteriaId":"EF54ED5C-B686-4036-8EC4-C2C65D4463FD","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp5:*:*:*:*:*:*","matchCriteriaId":"D8162D88-A7D0-4BC0-A2D9-D83EC620C009","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp6:*:*:*:*:*:*","matchCriteriaId":"FE271018-6A6F-4CDD-97AA-12F8A9DE9640","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp7:*:*:*:*:*:*","matchCriteriaId":"21A2D6ED-17D8-4DAD-9775-02419D79DD3F","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp8:*:*:*:*:*:*","matchCriteriaId":"A099E310-FBA2-4EB1-BD86-C52686E7FA89","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:21.09.0:sp9:*:*:*:*:*:*","matchCriteriaId":"0291CE0C-97E3-4933-9B13-6DBB616DAA60","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.04.0:-:*:*:*:*:*:*","matchCriteriaId":"334D6C73-8DED-4C77-9222-5534D1F3503D","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.04.0:sp1:*:*:*:*:*:*","matchCriteriaId":"7F517B94-96C4-4FD0-BB84-73CA2BA0F88B","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.04.0:sp2:*:*:*:*:*:*","matchCriteriaId":"65EA30F3-F924-42B3-BFCC-875411C0A7C7","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.04.0:sp3:*:*:*:*:*:*","matchCriteriaId":"42357940-98B9-4966-9B85-E5AB495560A6","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.04.0:sp4:*:*:*:*:*:*","matchCriteriaId":"EB8DB5F9-1972-4F06-9060-E95F8C462681","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.04.0:sp5:*:*:*:*:*:*","matchCriteriaId":"6AD9CDC5-D62C-4CC4-9328-2C0E41300CDD","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:-:*:*:*:*:*:*","matchCriteriaId":"A54ADF57-985E-41AB-B1DF-77E9303531E8","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F94411ED-3CDA-4432-8487-2EE2DD072D6D","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E4050B8C-FBA8-48CA-AF45-BC7C70235E37","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp3:*:*:*:*:*:*","matchCriteriaId":"19490284-BC6A-45A0-B68D-743E139EB067","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D5CF8652-238F-4442-9AA2-B8A6FD9B681C","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp5:*:*:*:*:*:*","matchCriteriaId":"FC9DEE58-BD1A-47DB-918B-CE1A1D7A7866","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp6:*:*:*:*:*:*","matchCriteriaId":"8948D8AB-8392-4CD8-8F8B-F59410A37BBF","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp7:*:*:*:*:*:*","matchCriteriaId":"A3E14B5E-A1CF-402C-B56A-C745DE28BF91","vulnerable":true},{"criteria":"cpe:2.3:a:intland:codebeamer:22.10.0:sp8:*:*:*:*:*:*","matchCriteriaId":"0B1F1CCA-B937-4AFB-8363-554D74DE71BD","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device."},{"lang":"es","value":"?Si un atacante engaña a un usuario administrador de PTC Codebeamer para que haga clic en un vínculo malicioso, puede permitir que el atacante inyecte código arbitrario para que se ejecute en el navegador del dispositivo de destino."}],"id":"CVE-2023-4296","lastModified":"2026-06-17T06:37:31.060","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"ics-cert@hq.dhs.gov","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4296","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-01-16T21:20:33.944438Z","version":"2.0.3"}}]},"published":"2023-08-29T22:15:09.297","references":[{"source":"ics-cert@hq.dhs.gov","url":"http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html"},{"source":"ics-cert@hq.dhs.gov","url":"http://seclists.org/fulldisclosure/2023/Sep/10"},{"source":"ics-cert@hq.dhs.gov","tags":["Vendor Advisory"],"url":"https://codebeamer.com/cb/wiki/31346480"},{"source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://seclists.org/fulldisclosure/2023/Sep/10"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://codebeamer.com/cb/wiki/31346480"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"ics-cert@hq.dhs.gov","type":"Secondary"}]}