SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-2819

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type.

MEDIUM 4.3EPSS 0.26%

Does this matter?

Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.

Description

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type.  This could result in arbitrary javascript code execution in an admin context. All versions prior to 5.10.0 are affected.  

CVSS 3.1
4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.26% probability · 17th percentile
CISA KEV
Not listed
Weakness
CWE-79
Affected
proofpoint/threat response auto pull
Source
security@proofpoint.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.