CVEvulnerability

CVE-2024-42180

9.8 CRITICAL Published 2025-01-12 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
1.6 LOW — CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434

Description

HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.

Affected configurations

• hcltech dryice myxalytics 6.3

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References