8.8
High
CVE-2023-45722 HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input…
Description
HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Potential exploits can completely disrupt or take over the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE MyXalytics | Versions not published |
Other CVEs of DRYiCE MyXalytics
The 24 CVEs of DRYiCE MyXalytics →
CVE-2024-42181
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
1.6
Low
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability
1.6
Low
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability
2.0
Low
CVE-2024-42175
HCL MyXalytics is affected by a weak input validation vulnerability
2.6
Low