cve/2023/CVE-2023-3589.md

### [CVE-2023-3589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3589)
![](https://img.shields.io/static/v1?label=Product&message=Teamwork%20Cloud%20-%20Business%20Edition&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Teamwork%20Cloud%20-%20Business%20Pro%20Edition&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Teamwork%20Cloud%20-%20Enterprise%20Edition&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Teamwork%20Cloud%20-%20Standard%20Edition&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=No%20Magic%20Release%202021x%20Golden%3C%3D%20No%20Magic%20Release%202021x%20Refresh2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)&color=brighgreen)

### Description

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds