4.2Media
CVE-2026-21761CORS Misconfiguration in DevOps Loop
Descripción
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains.
Debilidad (CWE):
CWE-942
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| HCLSoftware | DevOps Loop | 2.0.0 | |
| hcltech | devops loop | 2.0.0 |
Referencias y parches
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296 vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:hcltech:devops_loop:2.0.0:*:*:*:*:*:*:*