3456 matches found
CVE-2022-44760
CVE-2022-44760 concerns HCL Leap where an unsafe default file type filter policy in Leap permits execution of unsafe JavaScript in deployed applications. The root cause listed is the default file type filtering policy, leading to potential unsafe script execution. Documented impacts indicate unsa...
CVE-2022-44760 HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications...
CVE-2022-44760 HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications...
CVE-2023-37516 HCL Leap is affected by missing "no cache" headers
Missing "no cache" headers in HCL Leap permits user directory information to be cached...
CVE-2023-37516
CVE-2023-37516 affects HCL Leap; the root cause is missing no-cache headers, which permits caching of user directory information. The vulnerability is described with a CVSSv3.1 base score of 3.2 (LOW) with LOCAL attack vector, requiring user interaction and low privileges. There is no explicit ex...
CVE-2023-37516 HCL Leap is affected by missing "no cache" headers
Missing "no cache" headers in HCL Leap permits user directory information to be cached...
CVE-2024-30127 HCL Leap is affected by missing "no cache" headers
Missing "no cache" headers in HCL Leap permits sensitive data to be cached...
CVE-2024-30127 HCL Leap is affected by missing "no cache" headers
Missing "no cache" headers in HCL Leap permits sensitive data to be cached...
CVE-2024-30127
CVE-2024-30127 concerns HCL Leap. The available connected data indicate the root cause is missing "no cache" headers, which permits sensitive data to be cached. The NVD metrics show a low base score (CVSS 3.1: 3.2, LOW) with local attack vector, low privileges required, and user interaction requi...
CVE-2024-30114
Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment...
CVE-2024-30147
Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications...
CVE-2024-30147
Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications...
CVE-2024-30114
Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment...
CVE-2024-30113
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
CVE-2024-30113
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
CVE-2023-45720
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-45720
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-37534
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters...