CVE-2023-37502 — An unrestricted file upload vulnerability affects HCL Compass
HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser.
Published: 2023-10-18 · CVSS: 9.0 · CVSS 3.1
HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7