Loading HuntDB...

GHSA-gccr-qg9r-6mhw

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275665.

Related CVEs

Key Information

GHSA ID
GHSA-gccr-qg9r-6mhw
Published
February 4, 2024 3:30 AM
Last Modified
February 4, 2024 3:30 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: September 4, 2025 6:33 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.