CVE-2024-30148

Mô tả

Tham khảo

• support.hcl-software.com/csm · Vendor Advisory

Lỗ hổng khác của hcl leap

• CVE-2024-30127THẤP 3.2Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
• CVE-2023-37516THẤP 3.2Missing "no cache" headers in HCL Leap permits user directory information to be cached.
• CVE-2022-44760TRUNG BÌNH 4.6Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications.
• CVE-2022-44759TRUNG BÌNH 5.4Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.
• CVE-2024-30147TRUNG BÌNH 6.1Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.