CVE-2023-37517

Description

References

• support.hcl-software.com/csm · Vendor Advisory

domino leap 的其他漏洞

• CVE-2024-30146低危 2.7Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.
• CVE-2024-30145中危 6.1Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed application…
• CVE-2024-30115中危 5.4Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.
• CVE-2023-45721中危 5.3Insufficient default configuration in HCL Leap allows anonymous access to directory information.
• CVE-2023-37535中危 6.1Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.