CVE-2025-52624
A vulnerability Bypass of the script allowlist configuration in HCL AION.
An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0.
An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0.
Vendor
Product
CWE
Yayın Tarihi
2025-10-10 11:15:42
Güncelleme
2025-10-24 19:36:51
Source Identifier
psirt@hcl.com
KEV Date Added
-