3ds

Teamwork Cloud No Magic Release

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-3589

  • EPSS 0.16%
  • Published 09.10.2023 09:15:10
  • Last modified 21.11.2024 08:17:36

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

5.4

CVE-2023-3588

  • EPSS 0.11%
  • Published 13.09.2023 19:15:07
  • Last modified 21.11.2024 08:17:36

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.