Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2022-27562

HCL Domino Volt is affected by an unrestricted upload of a dangerous file type

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL Domino Volt

Default version status: unaffected

  • 1.0 - 1.0.5affected

References