cve/2023/CVE-2023-37528.md
2024-05-25 21:48:12 +02:00

19 lines
749 B
Markdown

### [CVE-2023-37528](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37528)
![](https://img.shields.io/static/v1?label=Product&message=BigFix%20Platform&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%209.5%20-%209.5.23%2C%2010%20-%2010.0.9%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/kaje11/CVEs