CVE:CVE-2022-38660
CNNVD:CNNVD-202211-2109
HCL Technologies XPages是印度HCL Technologies公司的一种由 Domino 服务器或 Notes 客户端解释的 XML ，并在 web 浏览器或 Notes 客户端中呈现。
HCL Technologies XPages 存在安全漏洞，该漏洞源于存在跨站请求伪造(CSRF)，未经身份验证的攻击者可以利用此漏洞代表登录用户在应用程序中执行操作。
solution:Upgrade hcltech domino to a higher version than 9.0.1,9.0.1:feature_pack_10_interim_fix_3,9.0.1:feature_pack_10_interim_fix_4,9.0.1:feature_pack_10_interim_fix_5,9.0.1:feature_pack_8,9.0.1:feature_pack_8_interim_fix_1,9.0.1:feature_pack_8_interim_fix_2,9.0.1:feature_pack_8_interim_fix_3,and avoid the version (,9.0.1),9.0.1:feature_pack_10_interim_fix_3,9.0.1:feature_pack_10_interim_fix_4,9.0.1:feature_pack_10_interim_fix_5,9.0.1:feature_pack_8,9.0.1:feature_pack_8_interim_fix_1,9.0.1:feature_pack_8_interim_fix_2,9.0.1:feature_pack_8_interim_fix_3