CVE-2022-42449

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications...

CVE-2022-42449

creationtimestamp| type| source ---|---|--- 2025-04-30 21:15:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14161 2025-04-30 21:55:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxisob62p 2025-05-01 00:36:50+00:00| seen| https://t.me/cvedetector/24153...

CVE-2022-42449

CVE-2022-42449 affects HCL Domino Volt. The root cause is an unsafe default file-type filtering policy that allows uploading .html files, enabling execution of unsafe JavaScript in deployed applications. Documents consistently describe the issue but do not provide a confirmed patch version or rem...