Düşük CVSS 3.1
CVE-2026-21834: CVE-2026-21834: güvenlik açığı
Açıklama (NVD)
HCL AION is affected by a vulnerability where the Content-Security-Policy (CSP) security response header was missing from application responses. Without this header, the browser does not restrict the sources of scripts and other content, increasing exposure to cross-site scripting and content-injection attacks, potentially resulting in unintended behavior or security impact under certain conditions.
Özet bilgiler
- CVSS v3.1
- 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N - CWE
- CWE-1021
- Yama
- Yok / bilinmiyor