PT-2023-16862 · Dsm · Enovia Live Collaboration

Shadi Habbal · Publicado 2023-03-09 · Atualizado 2023-03-15 · CVE-2023-1287

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ENOVIA Live Collaboration version V6R2013xE

Description An XSL template vulnerability in the software allows Remote Code Execution.

Recommendations For ENOVIA Live Collaboration version V6R2013xE, update to a version that fixes the XSL template vulnerability to prevent Remote Code Execution.

Correção

Special Elements Injection

Code Injection

Enumeração de Fraquezas

CWE-74

CWE-94

Identificadores relacionados

CVE-2023-1287

Produtos afetados

Enovia Live Collaboration

Referências · 6

• https://3ds.com/vulnerability/advisories · Aviso do Fabricante
• https://t.me/cibsecurity/59739 · Publicação no Telegram
• https://t.me/cvenotify/45880 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-1287 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-1287 · Nota de Segurança
• https://t.me/cvenotify/45869 · Publicação no Telegram