HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.Referenceshttps://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131695
