Autocomplete HTML Attribute Vulnerability in HCL AION

CVE-2025-52623

What is CVE-2025-52623?

HCL AION is vulnerable to an issue where the autocomplete attribute is not disabled for password fields. This flaw can allow the browser to store and autofill sensitive credentials, potentially leading to inadvertent disclosure of passwords and unauthorized access. The vulnerability primarily affects HCL AION version 2.0, emphasizing the importance of securing password fields in web applications to mitigate risks associated with credential leakage.

References