HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request.
References
Link | Resource |
---|---|
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0103581 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 03:53
Type | Values Removed | Values Added |
---|---|---|
Summary | HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request. |
Information
Published : 2023-04-02 21:15
Updated : 2024-02-28 20:13
NVD link : CVE-2022-42447
Mitre link : CVE-2022-42447
CVE.ORG link : CVE-2022-42447
JSON object : View
Products Affected
hcltech
- hcl_compass
CWE
CWE-352
Cross-Site Request Forgery (CSRF)