CVE-2023-37534: HCL Leap is affected by a Cross-site scripting (XSS) vulnerability
Published Apr 24, 2025
·Updated
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters.
Affected Software
2 affected components
HCL Leap
hcltech Hcl Leap<9.3.4
Event History
Apr 24, 2025
CVE Published
via MITRE·04:27 PM
Data Sourced
via MITRE·04:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37534?
CVE-2023-37534 has a critical severity rating due to its potential for script injection.
2
How do I fix CVE-2023-37534?
To fix CVE-2023-37534, ensure your HCL Leap installation has the latest security patches that address the insufficient URI protocol whitelist.
3
What impact does CVE-2023-37534 have on HCL Leap?
CVE-2023-37534 allows attackers to perform script injection through vulnerable query parameters, which could compromise the application.
4
Is HCL Leap the only affected software by CVE-2023-37534?
Yes, HCL Leap is the only software specifically identified as affected by CVE-2023-37534.
5
When was CVE-2023-37534 disclosed?
CVE-2023-37534 was disclosed in 2023, indicating a recent vulnerability in HCL Leap.