CVE-2023-37534 HIGH

CVE-2023-37534: HCL Leap is affected by a Cross-site scripting (XSS) vulnerability

Vendor Hcl Software

Product HCL Leap

Weakness CWE-79 · XSS

Published April 24, 2025

Last update April 24, 2025

CVSS base score

7.1/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

What the vulnerability does

01Description

Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters.

Key dates

April 24, 2025 CVE published

April 24, 2025 Record updated

External resources

Related vulnerabilities