Security Advisory
CVE-2023-37526
6.5
MEDIUM
Vulnerability Description
HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnerable to a CORS misconfiguration which could potentially allow unauthorized access to the application resources from any web domain and enable cache poisoning attacks.
Published Date
May 14, 2024
Official Source
NIST NVD Advisory