Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-45707 EUVD-2023-49996GHSA-fcw5-xg8j-vw6m

HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)

Published Jun 8, 2024 · Updated Aug 2, 2024 · Assigned by HCL

Description

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.

Affected products

VendorProductAffectedFixed
HCL Software Connections Docs <= 2.0.2 —

References