1. Home
  2. CVE Database
  3. CVE-2023-3589
MEDIUM · 6.8

CVE-2023-3589

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send...

Vulnerability Description

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
3DsTeamwork Cloud No Magic Release2021x

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2023-3589?

CVE-2023-3589 is a vulnerability with a CVSS score of 6.8 (MEDIUM). A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send...

How severe is CVE-2023-3589?

CVE-2023-3589 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-3589?

Check the references section above for vendor advisories and patch information. Affected products include: 3Ds Teamwork Cloud No Magic Release.