9.6
Critical
CVE-2022-42447 HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS)
Description
HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Compass2.0 | Versions not published |