An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:NAlteryx Server
APPAlteryx2023.1.1.460
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
Related vulnerabilities
CVE-2025-28244HIGH8.8ten sam produkt
Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers...
CVE-2025-63291MEDIUM5.4ten sam produkt
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely...
CVE-2025-28245MEDIUM6.1ten sam produkt
Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbi...
CVE-2023-26961MEDIUM4.8ten sam produkt
Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. This vulnerability al...