CVE-2023-2819
Medium
Description
A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type. This could result in arbitrary javascript code execution in an admin context. All versions prior to 5.10.0 are affected.
SeverityMedium
CVSS4.3
Exploit probability—
ProductProofpoint Threat Response Auto Pull
PublishedJun 14, 2023
First seenJun 14, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- proofpoint threat_response_auto_pull5.10.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| proofpoint threat_response_auto_pull | v < 5.10.0 | 5.10.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.