CVE-2025-28244

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2025-07-10

Last modified

2025-07-11

Weaknesses

CWE-922

Affected products

• Alteryx Server (Alteryx)

References

• https://alteryx.com
• https://gist.github.com/DylanGrl/2771afe86bdd2665b83f28c1ff5c12eb