CVE-2021-27774

User input included in error response, which could be used in a phishing attack...

CVE-2021-27774

CVE-2021-27774 involves HCL Digital Experience and an injection-type vulnerability where user input is echoed in an error response. This behavior could enable phishing attacks by exposing or misusing input data via error messages. The connected documents corroborate that the issue centers on inpu...

CVE-2021-27774 An injection vulnerability affects HCL Digital Experience

User input included in error response, which could be used in a phishing attack...