Weakness (CWE)
CWE-1032: OWASP Top Ten 2017 Category A6 - Security Misconfiguration
Category Incomplete Mapping prohibited
Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2017.
Source: MITRE CWE-1032
1 result · Clear filters · Feed
-
Medium 5.4
HCL AION is susceptible to Bypass of the script allow list configuration vulnerability
A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This …