CVE-2023-37502
18.10.2023, 23:15
HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser.Enginsight
| Vendor | Product | Version |
|---|---|---|
| hcltech | hcl_compass | 2.0.0 ≤ 𝑥 ≤ 2.0.3 |
| hcltech | hcl_compass | 2.2.0 ≤ 𝑥 < 2.2.3 |
| hcltech | hcl_compass | 2.1.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration