Home

Description

Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications.

PUBLISHED Reserved 2022-11-04 | Published 2025-04-24 | Updated 2025-04-25 | Assigner HCL




MEDIUM: 4.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Problem types

CWE-434 Unrestricted Upload of File with Dangerous Type

Product status

Default status
unaffected

9.0 - 9.3
affected

References

support.hcl-software.com/...rticle&sysparm_article=KB0119900

cve.org (CVE-2022-44760)

nvd.nist.gov (CVE-2022-44760)

Download JSON