CVE-2021-27770 — HCL Sametime is vulnerable to arbitrary HTTP requests
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by …
Published: 2022-05-12 · CVSS: 6.8 · CVSS 3.1
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7