8.8
Élevée
CVE-2023-45722 HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input…
Description
HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Potential exploits can completely disrupt or take over the application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DRYiCE MyXalytics | Versions non publiées |
Autres CVE de DRYiCE MyXalytics
Les 24 CVE de DRYiCE MyXalytics →
CVE-2024-42181
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
1.6
Faible
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability
1.6
Faible
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability
2.0
Faible
CVE-2024-42175
HCL MyXalytics is affected by a weak input validation vulnerability
2.6
Faible