CVE-2023-37535 Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters

Description

Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.

Affected products and versions

Product	Affected versions	Fixed in
HCL Domino Leap	Versions not published

Other CVEs of HCL Domino Leap

The 6 CVEs of HCL Domino Leap →

CVE-2024-30146 Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the… 4.1 Medium CVE-2024-30145 Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment… 6.5 Medium CVE-2024-30115 Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the… 6.3 Medium CVE-2023-45721 Insufficient default configuration in HCL Leap allows anonymous access to directory information 5.3 Medium