CVE-2023-2819

Summary

CVE-2023-2819 is a stored cross-site scripting vulnerability affecting Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) before version 5.10.0. An authenticated administrator on an adjacent network can exploit this flaw to replace an image file with an arbitrary MIME type, leading to the execution of malicious JavaScript code in an admin context. This vulnerability poses a significant risk as it allows for unauthorized JavaScript injection and potentially serious security consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.