CVE-2023-28017: HCL Connections is vulnerable to cross-site scripting
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user after visiting the vulnerable URL which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials and comprise a user's account then launch other attacks.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28017?
CVE-2023-28017 is classified as a cross-site scripting vulnerability which can lead to significant security risks.
How do I fix CVE-2023-28017?
To fix CVE-2023-28017, users should apply the latest patches from HCL for affected versions of HCL Connections.
Which versions of HCL Connections are affected by CVE-2023-28017?
CVE-2023-28017 affects HCL Connections versions 6.0, 6.5, 7.0, and 8.0.
What is the impact of CVE-2023-28017?
The impact of CVE-2023-28017 allows attackers to execute arbitrary script code in an unsuspecting user's browser when visiting a vulnerable URL.
Is user interaction required to exploit CVE-2023-28017?
Yes, exploitation of CVE-2023-28017 requires user interaction when they click on a malicious link.