CVE-2024-30147: HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Published Apr 24, 2025
·Updated
Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.
Affected Software
2 affected components
HCL Leap
hcltech Hcl Leap<9.3.8
Event History
Apr 24, 2025
CVE Published
via MITRE·04:21 PM
Data Sourced
via MITRE·04:21 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30147?
CVE-2024-30147 has been rated as a high severity vulnerability due to its potential for client-side script injection.
2
How do I fix CVE-2024-30147?
To fix CVE-2024-30147, ensure that you update HCL Leap to the latest version where the vulnerability has been addressed.
3
What kind of attacks does CVE-2024-30147 facilitate?
CVE-2024-30147 facilitates client-side script injection attacks, which can compromise the integrity of applications.
4
In which environment does CVE-2024-30147 occur?
CVE-2024-30147 occurs in both the authoring environment of HCL Leap and in deployed applications.
5
What applications are impacted by CVE-2024-30147?
Applications developed using HCL Leap are directly impacted by CVE-2024-30147.