Description
Improper sanitization of SVG files in HCL Leap
allows client-side script injection in deployed applications.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | 9.0 - 9.3 | — |
Medium · 4.6
CVE-2022-44759
EUVD-2022-47691GHSA-7928-xx56-23g7
HCL Leap is affected by Cross-site scripting (XSS)
Published Apr 24, 2025 · Updated Apr 25, 2025 · Assigned by HCL