Threats tagged 'ghsa-842g-mmxg-vg4x'

HCL DFXAnalytics has an insecure security header configuration vulnerability due to the use of the outdated X-XSS-Protection header. This header is no longer effective in modern browsers and may allow attackers to exploit browser-specific rendering flaws or bypass security controls that would be better managed by a Content Security Policy (CSP). The vulnerability has a low severity score and does not have known exploits in the wild.