CVE-2023-3589
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Oct 9, 2023
Updated: Oct 20, 2023
CWE ID 327
Summary
CVE-2023-3589 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud by No Magic. This issue, present in releases 2021x through 2022x, can enable an attacker to craft and send a malicious request to the server under certain conditions. Successful exploitation may result in unintended actions being taken on behalf of the affected user. It is crucial for users to apply the necessary patches to mitigate this risk and protect their data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- IBM WebSphere Application Server
Affected Vendors
- IBM Corporation