5364 matches found
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from improper endpoint access control that allows certain admin users to import applications from the server file system...
PT-2025-17737
Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to insufficient sanitization in HCL Leap, which allows client-side script injection in the authoring environment. Recommendations At the moment, there is no information...
CVE-2024-30147: Improper Neutralization of Input During Web Page Generation
Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications...
PT-2025-17842
Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to an insufficient URI protocol whitelist, which allows script injection through query parameters. Recommendations At the moment, there is no information about a newer...
CVE-2022-44759: Improper Neutralization of Input During Web Page Generation
Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications...
CVE-2024-30113: Improper Neutralization of Input During Web Page Generation
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from an insufficient whitelisting of the URI protocol, which allows scripts to be injected via query parameters...
PT-2025-17738
Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue concerns multiple vectors in HCL Leap that allow client-side script injection in the authoring environment and deployed applications. Recommendations At the moment, there is no...
PT-2025-17852
Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to improper sanitization of SVG files, which allows client-side script injection in deployed applications. This can potentially lead to security breaches. Recommendation...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from the lack of a no cache header, which could lead to user directory information being cached...
PT-2025-27987
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.147-1 Debian bookworm, 6.6.101 upstream, and SLE 15 SP4, SLE 15 SP5, SLE 15 SP6, and openSUSE Leap 15.4, 15.5. Description The Linux kernel contains a vulnerability related to a use-after-free condition in th...
CVE-2023-37534: Improper Neutralization of Input During Web Page Generation
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters...
CVE-2024-30148: Improper Access Control
Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem...
PT-2025-17843
Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to an insufficient default configuration in HCL Leap, which allows anonymous access to directory information. Recommendations At the moment, there is no information abou...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from an inadequate default configuration that allows anonymous access to directory information...
CVE-2023-45720: Exposure of Private Personal Information to an Unauthorized Actor
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2022-44760: Unrestricted Upload of File with Dangerous Type
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications...
PT-2025-17854
Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to missing "no cache" headers in HCL Leap, which allows user directory information to be cached. Recommendations At the moment, there is no information about a newer...