Skip to content
OpenAdvisories
Low · 1.6 CVE-2024-42180 EUVD-2024-40003GHSA-9rg3-f299-p33w

HCL MyXalytics is affected by a malicious file upload vulnerability

Published Jan 12, 2025 · Updated Jan 13, 2025 · Assigned by HCL

Description

HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.

Affected products

VendorProductAffectedFixed
HCL Software DRYiCE MyXalytics 6.3 —

References