CVE-2024-30114 Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment

Description

Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HCL Leap 9.3	premières → < 9.3.6	9.3.6

Autres CVE de HCL Leap

Les 10 CVE de HCL Leap →

CVE-2022-44759 Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications 4.6 Moyenne CVE-2022-44760 Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications 4.6 Moyenne CVE-2023-37516 Missing "no cache" headers in HCL Leap permits user directory information to be cached 3.2 Faible CVE-2024-30127 Missing "no cache" headers in HCL Leap permits sensitive data to be cached 3.2 Faible