| Package | Affected versions | Patched versions |
|---|---|---|
| bigfix compliance | = 2.0.12 |
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free