Vulnerability in HCL Domino Volt Allows Unsafe File Uploads and JavaScript Execution

CVE-2022-42449

What is CVE-2022-42449?

HCL Domino Volt exhibits a vulnerability that permits the upload of .html files due to an unsafe default file type filter policy. This flaw can lead to the execution of arbitrary and potentially harmful JavaScript in applications deployed on the platform. By exploiting this vulnerability, attackers may manipulate user sessions or execute malicious scripts, thereby compromising application security and user data integrity. It is essential for developers and organizations utilizing HCL Domino Volt to review their file handling policies and implement necessary security measures to mitigate these risks.

References