title: Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x
description: A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Dassault Systèmes
product: Teamwork Cloud - Business Edition
versions:
status: affected, version: No Magic Release 2021x Golden, lessThanOrEqual: No Magic Release 2021x Refresh2, versionType: custom
status: affected, version: No Magic Release 2022x Golden, lessThanOrEqual: No Magic Release 2022x Refresh2, versionType: custom
defaultStatus: unaffected
}
{
vendor: Dassault Systèmes
product: Teamwork Cloud - Enterprise Edition
versions:
status: affected, version: No Magic Release 2021x Golden, lessThanOrEqual: No Magic Release 2021x Refresh2, versionType: custom
status: affected, version: No Magic Release 2022x Golden, lessThanOrEqual: No Magic Release 2022x Refresh2, versionType: custom
defaultStatus: unaffected
}
{
vendor: Dassault Systèmes
product: Teamwork Cloud - Business Pro Edition
versions:
status: affected, version: No Magic Release 2021x Golden, lessThanOrEqual: No Magic Release 2021x Refresh2, versionType: custom
status: affected, version: No Magic Release 2022x Golden, lessThanOrEqual: No Magic Release 2022x Refresh2, versionType: custom
defaultStatus: unaffected
}
{
vendor: Dassault Systèmes
product: Teamwork Cloud - Standard Edition
versions:
status: affected, version: No Magic Release 2021x Golden, lessThanOrEqual: No Magic Release 2021x Refresh2, versionType: custom
status: affected, version: No Magic Release 2022x Golden, lessThanOrEqual: No Magic Release 2022x Refresh2, versionType: custom
defaultStatus: unaffected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
]