Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2023-28025

An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management

Description

Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate stored XSS vulnerabilities, a preventive measure involves thoroughly sanitizing and validating all user inputs before they are processed and stored in the server storage.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL BigFix Mobile / Modern Client Management

Default version status: unaffected

  • <= 3.1affected

References