← Database

CVE-2025-28244

HIGH CVSS: 8.8 Published: 2025-07-10 Modified: 2026-06-17

Description

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover

Affected Platforms

Alteryx Alteryx Server

Weakness Type

CWE-922

References