PT-2023-21620 · Proofpoint · Proofpoint Threat Response/ Threat Response Auto Pull

Name of the Vulnerable Software and Affected Versions: Proofpoint Threat Response/ Threat Response Auto Pull PTR/TRAP versions prior to 5.10.0 Description: A stored cross-site scripting issue in the Sources UI could allow an authenticated administrator on an adjacent network to replace an image...

CVE-2023-2819: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull PTR/TRAP could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type. This could result in arbitrary javascript code...