HCL Unica Platform Content Security Policy Misconfiguration Vulnerability

A vulnerability exists in HCL Unica Platform due to a misconfigured Content Security Policy (CSP). This misconfiguration can allow malicious resources to be loaded, potentially leading to cross-site scripting or clickjacking attacks.

Impact

Exploitation of this vulnerability could result in cross-site scripting or clickjacking attacks.

Remediation

To address this vulnerability, it is recommended to configure the Content Security Policy to restrict the sources from which content can be loaded. This can be done by adding the appropriate CSP directives in the web server configuration.