CVE-2022-44760: HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability
Published Apr 24, 2025
·Updated
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications.
Affected Software
2 affected components
HCL Leap
hcltech Hcl Leap>=9.0<9.3.1
Event History
Apr 24, 2025
CVE Published
via MITRE·08:37 PM
Data Sourced
via MITRE·08:37 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-44760?
CVE-2022-44760 is rated as a high severity vulnerability due to its potential to execute unsafe JavaScript in deployed applications.
2
How do I fix CVE-2022-44760?
To fix CVE-2022-44760, ensure that you update HCL Leap to the latest version where the unsafe default file type filter policy is addressed.
3
What is the impact of CVE-2022-44760?
CVE-2022-44760 could allow attackers to execute arbitrary JavaScript, leading to possible data breaches or unauthorized access.
4
When was CVE-2022-44760 disclosed?
CVE-2022-44760 was disclosed in December 2022.
5
Which versions of HCL Leap are affected by CVE-2022-44760?
CVE-2022-44760 affects specific versions of HCL Leap that utilize the unsafe default file type filter policy.