PT-2023-21620 · Proofpoint · Proofpoint Threat Response/ Threat Response Auto Pull

Published 2023-06-14 · Updated 2023-06-28 · CVE-2023-2819

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) versions prior to 5.10.0

Description A stored cross-site scripting issue in the Sources UI could allow an authenticated administrator on an adjacent network to replace an image file with an arbitrary MIME type, potentially resulting in arbitrary javascript code execution in an admin context.

Recommendations For versions prior to 5.10.0, update to version 5.10.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Sources UI to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-2819

Affected Products

Proofpoint Threat Response/ Threat Response Auto Pull

References · 4

• https://osv.dev/vulnerability/CVE-2023-2819 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2819 · Security Note
• https://proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0002 · Vendor Advisory
• https://t.me/cibsecurity/65248 · Telegram Post