CVE-2023-5770

Description

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.

CVSS v3.1 Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness Type (CWE)

CWE-838 CWE-838

Affected Products

Vendor	Product	Versions
proofpoint	enterprise_protection	All
proofpoint	enterprise_protection	All
proofpoint	enterprise_protection	All

References

Advisories & Patches

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0009 https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0009

Frequently Asked Questions

What is CVE-2023-5770? +

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions. It has a CVSS v3.1 base score of 5.3 (MEDIUM).

How severe is CVE-2023-5770? +

CVE-2023-5770 has a CVSS v3.1 score of 5.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2023-5770? +

CVE-2023-5770 affects products from proofpoint, specifically: enterprise_protection. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-5770? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-53641

FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a stored cross-site scripting (XSS) …

CVE-2025-4052 9.8

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage …

CVE-2024-11702 7.5

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based …

CVE-2024-34006 4.3

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in …

CVE-2024-10635 6.1

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment …

CVE-2025-8558 5.4

Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an …