Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

PTC ​Codebeamer: v22.10-SP7 or lowerPTC Codebeamer Cross site scripting

Risk 79
Severity
8.8
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

?If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

1 / 2

Remedy

PTC recommends the following: * ​Version 22.10.X: upgrade to 22.10-SP8 https://intland.com/codebeamer-download/  or newer version * ​Version 22.04.X: upgrade to 22.04-SP6 https://intland.com/codebeamer-download/  or newer version * ​Version 21.09.X: upgrade to 21.09-SP14 https://intland.com/codebeamer-download/  or newer version ​Docker Image download: https://hub.docker.com/r/intland/codebeamer/tags https://hub.docker.com/r/intland/codebeamer/tags ​Codebeamer installers: https://intland.com/codebeamer-download/ https://intland.com/codebeamer-download/ ​Hosted customers may request an upgrade through the support channel https://codebeamer.com/cb/tracker/1910563 . ​Note that version 2.0 is not impacted by this vulnerability. ​For more information refer to PTC Security Advisory and Resolution https://codebeamer.com/cb/wiki/31346480 .
First published (updated )
CVE-2023-4296

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203