CVE-2022-44760CWE-434

HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability

Medium · published April 24, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Unsafe default file type filter policy in HCL

Leap allows execution of unsafe JavaScript in deployed applications.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-04-24T20:37Z
EPSS history
Timeline
  • 24 APR 20:37Z
    HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability
    cvelistv5