CVE-2021-27774 User input included in error response, which could be used in a phishing attack

Description

User input included in error response, which could be used in a phishing attack.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HCL Digital Experience	Versions non publiées

Autres CVE de HCL Digital Experience

Les 4 CVE de HCL Digital Experience →

CVE-2025-0254 HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to… 5.9 Moyenne CVE-2022-38653 In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded 2.0 Faible CVE-2022-38662  In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites 6.1 Moyenne