critical9.6
CVE-2022-42447
HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS).
Impact
HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Hcl Compass | from 2.0.0 through 2.0.3 from 2.1.0 before 2.2.1 |