CVE-2023-37502

Publication date

2023-10-18 22:51:16

Family

HCL

State

PUBLISHED

Description

HCL Compass is vulnerable to lack of file upload security.  An attacker could upload files containing active code that can be executed by the server or by a users web browser.