4.3
Medium
CVE-2024-30143 HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing…
Description
HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the computer where the application is running.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL AppScan Traffic Recorder 1.0 | earliest → 1.0.6 | No fix stated |