Medium severity6.6NVD Advisory· Published Dec 21, 2023· Updated Jun 17, 2026
CVE-2023-28025
CVE-2023-28025
Description
Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate stored XSS vulnerabilities, a preventive measure involves thoroughly sanitizing and validating all user inputs before they are processed and stored in the server storage.
Affected products
3- cpe:2.3:a:hcltech:bigfix_modern_client_management:*:*:*:*:*:*:*:*Range: <3.2
- Range: <= 3.1
Patches
Vulnerability mechanics
References
1- support.hcltechsw.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.