Client-side Script Injection Vulnerability in HCL Domino Volt

CVE-2022-42450

What is CVE-2022-42450?

An issue has been identified in HCL Domino Volt where improper sanitization of SVG files allows for client-side script injection. This vulnerability can be exploited when an attacker uploads a malicious SVG file, potentially leading to unauthorized access and control of deployed applications. Organizations using HCL Domino Volt must ensure proper validation and sanitization practices to mitigate the risks associated with this vulnerability.

References