| Package | Affected versions | Patched versions |
|---|---|---|
| dfxanalytics | < 4.1 | 4.1 |
HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit browser-specific rendering flaws or bypass security controls that should instead be managed by a robust Content Security Policy (CSP).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free