PT-2023-16862 · Dsm · Enovia Live Collaboration

Shadi Habbal · Published 2023-03-09 · Updated 2023-03-15 · CVE-2023-1287

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ENOVIA Live Collaboration version V6R2013xE

Description An XSL template vulnerability in the software allows Remote Code Execution.

Recommendations For ENOVIA Live Collaboration version V6R2013xE, update to a version that fixes the XSL template vulnerability to prevent Remote Code Execution.

Fix

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

CVE-2023-1287

Affected Products

Enovia Live Collaboration

References · 6

• https://3ds.com/vulnerability/advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-1287 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1287 · Security Note
• https://t.me/cibsecurity/59739 · Telegram Post
• https://t.me/cvenotify/45880 · Telegram Post
• https://t.me/cvenotify/45869 · Telegram Post