VULNERABILITY INTELLIGENCE

CVE-2023-2819

CVSS score4.3 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2023-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type.  This could result in arbitrary javascript code execution in an admin context. All versions prior to 5.10.0 are affected.

Weakness classification

  • security@proofpoint.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references