Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-28245

Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.

Published

2025-07-10T19:15:24.677

Last Modified

2025-07-17T00:58:02.300

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses

Type: Secondary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	alteryx	alteryx_server	2023.1.1.460	Yes

References

https://alteryx.com Product ([email protected])
https://gist.github.com/DylanGrl/5e0ac3924f4d939e9c1ebb8632f2851b Exploit, Third Party Advisory ([email protected])
https://gist.github.com/DylanGrl/5e0ac3924f4d939e9c1ebb8632f2851b Exploit, Third Party Advisory (134c704f-9b21-4f2e-91b3-4a467353bcc0)