CVE-2022-38657

CVSS V2 None CVSS V3 None
Description
An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page.
Overview
  • CVE ID
  • CVE-2022-38657
  • Assigner
  • psirt@hcl.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-12T04:15:14
  • Last Modified Date
  • 2023-02-21T18:15:57
Weakness Enumerations
CWE URL
CWE-601 http://cwe.mitre.org/data/definitions/601.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:hcltech:hcl_leap:*:*:*:*:*:*:*:* 1 OR 9.3
References
Reference URL Reference Tags
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0097201 Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-38657
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38657
History
Created Old Value New Value Data Type Notes
2023-04-17 07:33:04 Added to TrackCVE
2023-04-17 07:33:06 Weakness Enumeration new