Description
Unsafe default file type filter policy in HCL
Leap allows execution of unsafe JavaScript in deployed applications.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | 9.0 - 9.3 | — |
Medium · 4.6
CVE-2022-44760
EUVD-2022-47692GHSA-mw98-rfjc-q8w9
HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability
Published Apr 24, 2025 · Updated Apr 25, 2025 · Assigned by HCL