CVE-2025-28244

HIGH

8.8

Description

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover

Details CVE

Score CVSS v3.18.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie7/10/2025

Derniere modification7/17/2025

Sourcenvd

Observations honeypot0

Produits affectes

alteryx:alteryx_server

Faiblesses (CWE)

CWE-922

References

https://alteryx.com(cve@mitre.org)

https://gist.github.com/DylanGrl/2771afe86bdd2665b83f28c1ff5c12eb(cve@mitre.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.