CVE-2022-44759

Description

Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.

PUBLISHED Reserved 2022-11-04 | Published 2025-04-24 | Updated 2025-04-25 | Assigner HCL

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0119900

cve.org (CVE-2022-44759)

nvd.nist.gov (CVE-2022-44759)

Download JSON