HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: HCL

Published: 2022-05-31T23:50:11.060449Z

Updated: 2024-09-17T00:06:06.792Z

Reserved: 2021-02-26T00:00:00

Link: CVE-2021-27778

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-06-01T00:15:07.690

Modified: 2024-11-21T05:58:32.840

Link: CVE-2021-27778

cve-icon Redhat

No data.