Medium · 4.6 CVE-2022-42449 EUVD-2022-45522GHSA-wfj7-6gw7-5442

HCL Domino Volt is affected by an unrestricted upload of a dangerous file type

Published Apr 30, 2025 · Updated May 1, 2025 · Assigned by HCL

Description

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications

Vendor	Product	Affected	Fixed
HCL Software	HCL Domino Volt	1.0 - 1.0.5	—

CNA	v3.1	4.6
EUVD	v3.1	4.6