Client-side Script Injection Vulnerability in HCL Leap

CVE-2022-44759

What is CVE-2022-44759?

This vulnerability arises from the inadequate sanitization of SVG files within HCL Leap. An attacker could exploit this flaw to inject malicious client-side scripts into applications deployed using HCL Leap, potentially compromising user data and application integrity. It is crucial for organizations using HCL Leap to implement immediate security measures to mitigate this risk and safeguard their applications from potential exploitation.

References