3.2
Faible
CVE-2024-30127 Missing "no cache" headers in HCL Leap permits sensitive data to be cached
Description
Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Leap 9.3 | premières → < 9.3.9 | 9.3.9 |
Autres CVE de HCL Leap
Les 10 CVE de HCL Leap →
CVE-2022-44759
Improper sanitization of SVG files in HCL Leap
allows client-side script injection in deployed applications
4.6
Moyenne
CVE-2022-44760
Unsafe default file type filter policy in HCL
Leap allows execution of unsafe JavaScript in deployed applications
4.6
Moyenne
CVE-2023-37516
Missing "no cache" headers in HCL Leap permits user directory information to be cached
3.2
Faible
CVE-2023-37534
Insufficient URI protocol whitelist in HCL Leap
allows script injection through query parameters
7.1
Élevée