CVE-2022-42452: XSS
First published: Thu Mar 30 2023(Updated: )
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.
Credit: psirt@hcl.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HCL Launch | >=6.2.0.0<=6.2.7.18 | |
| HCL Launch | >=7.0.5.0<=7.0.5.13 | |
| HCL Launch | >=7.1.0.0<=7.1.2.9 | |
| HCL Launch | >=7.2.0.0<=7.2.3.2 | |
| HCL Launch | =7.3.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-42452?
CVE-2022-42452 is a vulnerability in HCL Launch where HTML code is stored and included without being sanitized, leading to potential attacks like XSS and Open Redirections.
How severe is CVE-2022-42452?
CVE-2022-42452 has a severity rating of 5.4, which is considered medium.
Which software versions are affected by CVE-2022-42452?
HCL Launch versions 6.2.0.0 to 6.2.7.18, 7.0.5.0 to 7.0.5.13, 7.1.0.0 to 7.1.2.9, 7.2.0.0 to 7.2.3.2, and 7.3.0.0 are affected by CVE-2022-42452.
How can I fix CVE-2022-42452?
To fix CVE-2022-42452, it is recommended to update HCL Launch to a version that includes a fix for this vulnerability.
Where can I find more information about CVE-2022-42452?
More information about CVE-2022-42452 can be found in the following article: [link](https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102081).
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/hcltechsw
- canonical/hcl launch
- version/hcl launch/6.2.0.0
- version/hcl launch/6.2.7.18
- version/hcl launch/7.0.5.0
- version/hcl launch/7.0.5.13
- version/hcl launch/7.1.0.0
- version/hcl launch/7.1.2.9
- version/hcl launch/7.2.0.0
- version/hcl launch/7.2.3.2
- version/hcl launch/7.3.0.0