← CVE Intelligence

CVE-2021-27778

HCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information. PUBLISHED

Description (CNA)

HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site.

Affected (CNA)

Vendor / productVersions
HCL Software / HCL Traveleraffected 12.0.1.0 and earlier

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.