Stored Cross-Site Scripting Vulnerability in Proofpoint Threat Response

CVE-2023-2819

Summary

A stored cross-site scripting vulnerability exists in the Sources UI of Proofpoint Threat Response and Threat Response Auto Pull, allowing authenticated administrators on adjacent networks to upload image files with arbitrary MIME types. This flaw may lead to the execution of arbitrary JavaScript code in an administrative context, compromising the integrity and security of the system. Organizations using versions prior to 5.10.0 should take immediate steps to update their installations.

References