CSP Directive Vulnerability in HCL Hive Telco Observability Web Application

CVE-2025-59874

What is CVE-2025-59874?

The HCL Hive Telco Observability web application exhibits a vulnerability due to missing required directives in its Content Security Policy (CSP). This oversight can expose the application to various security risks, allowing potential attackers to exploit the keycloak component's weaknesses. Implementing the necessary CSP directives is crucial to safeguard the application and enhance its overall security posture.

References