Skip to content
CVE PROGRAM SOURCE RECORD1.6 Low

CVE-2024-42180

HCL MyXalytics is affected by a malicious file upload vulnerability

Description

HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software DRYiCE MyXalytics

Default version status: unaffected

  • 6.3affected

References