Description
Insufficient URI protocol whitelist in HCL Leap
allows script injection through query parameters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | < 9.3.4 | — |
High · 7.1
CVE-2023-37534
EUVD-2023-41421GHSA-3xw2-8cp9-9v42
HCL Leap is affected by a Cross-site scripting (XSS) vulnerability
Published Apr 24, 2025 · Updated Apr 24, 2025 · Assigned by HCL