CVE-2023-45707 MEDIUM

CVE-2023-45707: HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)

Vendor Hcl Software
Product Connections Docs
Published June 8, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.

Key dates

02Disclosure timeline

June 8, 2024 CVE published
August 2, 2024 Record updated