CVE-2024-42180 — HCL MyXalytics is affected by a malicious file upload vulnerability

CVE-2024-42180

HCL MyXalytics is affected by a malicious file upload vulnerability PUBLISHED

Description (CNA)

HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.

Affected (CNA)

Vendor / product	Versions
HCL Software / DRYiCE MyXalytics	affected 6.3

CWE

CWE-434

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.