CVE-2024-42180CWE-434

HCL MyXalytics is affected by a malicious file upload vulnerability

Low · published January 12, 2025

CVSS v3.1
1.6
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.

The record
Technical detail
CVSS v3.1
1.6 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-01-12T21:53Z
EPSS history
Timeline
  • 12 JAN 21:53Z
    HCL MyXalytics is affected by a malicious file upload vulnerability
    cvelistv5