What is CVE-2023-5770?

CVE-2023-5770 is a medium-severity vulnerability in Proofpoint Enterprise Protection, classified under CWE-838. CVSS score: 5.3/10. Published 2024-01-09.

How severe is CVE-2023-5770?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Proofpoint Enterprise Protection

CVE-2023-5770

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Proofpoint Enterprise_protection — versions 8.18.6, 8.20.0, 8.20.2
Proofpoint Enterprise Protection — versions 8.20.2, 8.20.0, 8.18.6

Weakness classification (CWE)

CWE-838

References

security@proofpoint.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-5770?: CVE-2023-5770 is a medium-severity vulnerability in Proofpoint Enterprise Protection, classified under CWE-838. CVSS score: 5.3/10. Published 2024-01-09.
How severe is CVE-2023-5770?: Medium severity. CVSS v3 base score is 5.3 out of 10.