Script Injection Vulnerability in HCL Domino Volt and Domino Leap

CVE-2023-37535

What is CVE-2023-37535?

HCL Domino Volt and Domino Leap suffer from a vulnerability that allows for script injection via query parameters due to an inadequate URI protocol whitelist. This weakness can be exploited by malicious actors to execute arbitrary scripts, potentially compromising the integrity and security of the applications. It is crucial for users and administrators of affected products to apply the necessary updates and implement security measures to mitigate the risk associated with this vulnerability.

References