Approved changes feed: RSS · Atom

cpe:2.3:a:alteryx:alteryx_server:2022.1.1.42590:*:*:*:*:*:*:*

part: a version: 2022.1.1.42590 update: *

VendorAlteryx (08a42e8b-0adf-578c-8b18-eee126702331)
ProductAlteryx Server (611f1bf9-cca9-5a38-904a-5a8a21eeec7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26961 vulnerable 2026-06-08 05:57:40.489077 Details available
Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. This vulnerability allows attackers to upload arbitrary files (e.g., JavaScript content for stored XSS) via the type field in a JSON document within a PUT /gallery/api/media request.
Published: 2023-08-08T00:00:00.000Z
Updated: 2024-10-15T18:00:54.074Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.