6.3
Moyenne
CVE-2024-30113 Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the…
Description
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Leap 9.3 | premières → < 9.3.6 | 9.3.6 |
Autres CVE de HCL Leap
Les 10 CVE de HCL Leap →
CVE-2022-44759
Improper sanitization of SVG files in HCL Leap
allows client-side script injection in deployed applications
4.6
Moyenne
CVE-2022-44760
Unsafe default file type filter policy in HCL
Leap allows execution of unsafe JavaScript in deployed applications
4.6
Moyenne
CVE-2023-37516
Missing "no cache" headers in HCL Leap permits user directory information to be cached
3.2
Faible
CVE-2024-30127
Missing "no cache" headers in HCL Leap permits sensitive data to be cached
3.2
Faible