High WID-SEC-2024-1315 1 CVE

HCL Domino: Schwachstelle ermöglicht Cross-Site Scripting

Published Jun 6, 2024 · Updated Jun 12, 2024 · Revision 2 · de-DE

Vendor: HCL Software Product: Domino Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in HCL Domino ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Domino bietet Unternehmens-E-Mail, sowie Kollaborations-Funktionen und eine Anwendungs-Plattform.

Vulnerabilities 1

High 8.4

CVE-2023-37539

HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack …

HCL Software Domino Server

Jun 6, 2024

Revision history

2024-06-12 #2
Produktversion angepasst
2024-06-06 #1
Initiale Fassung

References

HCL Security Bulletin KB0113715 vom 2024-06-06
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113715
GitHub Database
https://github.com/advisories/GHSA-pqhj-hg4g-hg2v