CVE-2023-37534 Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters

Description

Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HCL Leap 9.3	premières → < 9.3.4	9.3.4

Autres CVE de HCL Leap

Les 10 CVE de HCL Leap →

CVE-2022-44759 Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications 4.6 Moyenne CVE-2022-44760 Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications 4.6 Moyenne CVE-2023-37516 Missing "no cache" headers in HCL Leap permits user directory information to be cached 3.2 Faible CVE-2024-30127 Missing "no cache" headers in HCL Leap permits sensitive data to be cached 3.2 Faible