Description
HCL Verse is susceptible to a Reflected Cross Site Scripting (XSS) vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Verse | < 3.1 | — |
Advisories 1
- WID-SEC-2023-1899 HCL BigFix: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Jul 26, 2023