Script Injection Vulnerability in HCL Leap Software

CVE-2023-37534

What is CVE-2023-37534?

An insufficient URI protocol whitelist in HCL Leap allows for script injection via compromised query parameters. This vulnerability can lead to potential exploitation, enabling attackers to execute malicious scripts, affecting the integrity and security of web applications that utilize HCL Leap. Organizations using this software must take proactive measures to assess their exposure and mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References