PT-2023-32204 · 3Dswymer+1 · 3Dswymer+1

Published 2023-11-21 · Updated 2023-11-25 · CVE-2023-5599

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions 3DSwymer versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x

Description A stored Cross-site Scripting (XSS) issue allows an attacker to execute arbitrary script code. This affects the 3DDashboard component.

Recommendations For versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x, consider disabling the 3DDashboard component until a patch is available to prevent exploitation of the stored Cross-site Scripting issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-5599

Affected Products

3Ddashboard

3Dswymer

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-5599 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5599 · Vendor Advisory
• https://3ds.com/vulnerability/advisories · Vendor Advisory
• https://t.me/cvenotify/61144 · Telegram Post
• https://t.me/cvenotify/60933 · Telegram Post
• https://t.me/cvenotify/60910 · Telegram Post