CVE-2023-37502

Summary

CVE-2023-37502 is a vulnerability affecting HCL Compass. This issue involves insufficient file upload security, allowing an attacker to upload malicious files containing active code. Upon successful exploitation, this code can be executed by the server or even a user's web browser. This poses a significant risk of remote code execution and potential data breaches. Users are advised to update their HCL Compass installation as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.