Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-2819

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Proofpoint

Description

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type.  This could result in arbitrary javascript code execution in an admin context. All versions prior to 5.10.0 are affected.  

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Proofpoint Threat Response Auto Pull

Default version status: unaffected

  • 0 to < 5.10.0affected

References