CVE-2022-42449

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - psirt@hcl.com

Published

2025-04-30

Last modified

2025-05-01

Weaknesses

CWE-434

Affected products

• Hcl Domino Volt (Hcl Software)
• Domino Leap (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722