critical9.0
CVE-2023-37502
HCL Compass is vulnerable to lack of file upload security.
Impact
HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Hcl Compass | from 2.0.0 through 2.0.3 from 2.2.0 before 2.2.3 Version 2.1.0 |