HCL Connections Docs Vulnerable to Cross-Site Scripting Attack
CVE-2023-45707

4.4MEDIUM

Key Information:

Vendor

Hcl Software
Status
Connections Docs
Vendor
CVE Published:
8 June 2024

What is CVE-2023-45707?

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.

Affected Version(s)

Connections Docs <= 2.0.2

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_a...

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.