Malicious File Upload Vulnerability in HCL MyXalytics Application
CVE-2024-42180

1.6LOW

Key Information:

Vendor
HCL Software Software
Status
Dryice Myxalytics
Vendor
CVE Published:
12 January 2025

Summary

HCL MyXalytics is susceptible to a file upload vulnerability that enables attackers to upload and potentially execute malicious files. The application inadequately validates file types, which includes the acceptance of disallowed formats, double extensions, null bytes, and special characters. This flaw can lead to unauthorized access and execution of harmful scripts, jeopardizing the integrity and security of the application and its underlying systems.

Affected Version(s)

DRYiCE MyXalytics 6.3

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
1.6
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.