CVE-2023-0089

HIGH

Proofpoint Enterprise Protection <8.20.0 - Authenticated RCE

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-0089. PoCs published by ly1g3.

AI-analyzed exploit summary The repository provides a detailed technical analysis and functional PoC for CVE-2023-0089, a command injection vulnerability in Proofpoint Messaging Security Gateway. The exploit leverages unsanitized input in the `getMsgType` function of `Euwebutils.pm` to achieve authenticated RCE as the `pps` user via environment variable manipulation.

Description

The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.

Exploits (1)

nomisec WORKING POC 1 stars

by ly1g3 · poc

https://github.com/ly1g3/proofpoint-CVE-2023-0089

View Code ZIP pw:eip

The repository provides a detailed technical analysis and functional PoC for CVE-2023-0089, a command injection vulnerability in Proofpoint Messaging Security Gateway. The exploit leverages unsanitized input in the `getMsgType` function of `Euwebutils.pm` to achieve authenticated RCE as the `pps` user via environment variable manipulation.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Proofpoint Messaging Security Gateway 8.18.4.73

Auth required

Prerequisites: Authenticated low-level user access to the Euweb interface · Network access to the target Proofpoint Messaging Security Gateway

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Jul 08, 2026 Full analysis →

References (1)

Core 1

Core References

Vendor Advisory

https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001

Scores

CVSS v3 8.8

EPSS 0.0073

EPSS Percentile 50.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-94 CWE-95

Status published

Products (3)

proofpoint/enterprise_protection 8.18.6

proofpoint/enterprise_protection 8.20.0

proofpoint/enterprise_protection < 8.13.22

Published Mar 08, 2023

Tracked Since Feb 18, 2026