8.8
High
CVE-2023-4296 If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to…
Description
If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Codebeamer 22.10 | earliest → 22.10-SP7 | No fix stated |
| Codebeamer 22.04 | earliest → 22.04-SP5 | No fix stated |
| Codebeamer 21.09 | earliest → 21.09-SP13 | No fix stated |
| Codebeamer 2.0 | earliest → < 2.0 | 2.0 |