CVE-2023-0089

The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.

Score

CVSS 3.1 8.8 High

Status

Modified - security@proofpoint.com

Published

2023-03-08

Last modified

2025-02-28

Weaknesses

CWE-94, CWE-95

Affected products

• Enterprise Protection (Proofpoint)

References

• https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001