CVE-2024-30147 HCL Leap is affected by a cross-site scripting (XSS) vulnerability

Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications...

CVE-2024-30148

Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem...

CVE-2024-30148

Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem...

CVE-2024-30148 HCL Leap is affected by improper access control

Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem...

CVE-2024-30148 HCL Leap is affected by improper access control

Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem...

CVE-2024-30148

The CVE-2024-30148 entry concerns HCL Leap with an improper access-control vulnerability at a server endpoint, allowing certain admin users to import applications from the server filesystem. Affects HCL Leap (endpoint) per multiple sources; CVSS:v3.1 base score 4.1 (Medium) with vectors AV:N/AC:H...

PT-2025-17852

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to improper sanitization of SVG files, which allows client-side script injection in deployed applications. This can potentially lead to security breaches. Recommendation...

CVE-2024-30127: Use of Cache Containing Sensitive Information

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

PT-2025-17855

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue concerns missing "no cache" headers in HCL Leap, which allows sensitive data to be cached. Recommendations At the moment, there is no information about a newer version that contain...

PT-2025-17842

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to an insufficient URI protocol whitelist, which allows script injection through query parameters. Recommendations At the moment, there is no information about a newer...

PT-2025-17737

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to insufficient sanitization in HCL Leap, which allows client-side script injection in the authoring environment. Recommendations At the moment, there is no information...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from improper endpoint access control that allows certain admin users to import applications from the server file system...

PT-2025-17854

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to missing "no cache" headers in HCL Leap, which allows user directory information to be cached. Recommendations At the moment, there is no information about a newer...

PT-2025-17844

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to an insufficient sanitization policy in HCL Leap, which allows client-side script injection in the deployed application through the HTML widget. Recommendations At the...

PT-2025-17843

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to an insufficient default configuration in HCL Leap, which allows anonymous access to directory information. Recommendations At the moment, there is no information abou...

PT-2025-17738

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue concerns multiple vectors in HCL Leap that allow client-side script injection in the authoring environment and deployed applications. Recommendations At the moment, there is no...

PT-2025-17739

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue concerns improper access control of an endpoint in HCL Leap, allowing certain admin users to import applications from the server's filesystem. Recommendations At the moment, there ...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap suffers from a security vulnerability that stems from insufficient cleanup and allows injection of client-side scripts in the authoring environment...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from multiple vectors that allow injection of client-side scripts in the authoring environment and deployed applications...

PT-2025-17853

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue concerns an unsafe default file type filter policy in HCL Leap, which allows the execution of unsafe JavaScript in deployed applications. Recommendations At the moment, there is no...