CVE-2022-42452

HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.

Score

CVSS 3.1 5.4 Medium

Status

Modified - psirt@hcl.com

Published

2023-04-02

Last modified

2025-02-12

Weaknesses

CWE-79

Affected products

• Hcl Launch (Hcl Software)
• Hcl Launch (Hcltechsw)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102081