Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NAlteryx Server
APPAlteryx2023.1.1.460
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
XSS
CWE
Powiązane podatności
CVE-2025-28243HIGH8.0ten sam produkt
An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.
CVE-2025-28244HIGH8.8ten sam produkt
Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers...
CVE-2025-63291MEDIUM5.4ten sam produkt
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely...
CVE-2023-26961MEDIUM4.8ten sam produkt
Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. This vulnerability al...