Description
User input included in error response, which could be used in a phishing attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Digital Experience | 8.5, 9.0, 9.5 | — |
Low · 3.1
CVE-2021-27774
EUVD-2021-14515GHSA-j588-5q9c-p6xm
An injection vulnerability affects HCL Digital Experience
Published Sep 22, 2022 · Updated May 27, 2025 · Assigned by HCL