CVE-2022-42450

Description

Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.

PUBLISHED Reserved 2022-10-06 | Published 2025-04-30 | Updated 2025-05-01 | Assigner HCL

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0120722

cve.org (CVE-2022-42450)

nvd.nist.gov (CVE-2022-42450)

Download JSON