low3.1
CVE-2024-51472
IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection.
Impact
IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Devops Deploy | from 8.0.0.0 through 8.0.1.3 |
| Ibm | Urbancode Deploy | from 7.2 through 7.2.3.13 from 7.3 through 7.3.2.8 |