VULNERABILITY INTELLIGENCE

CVE-2024-42180

CVSS score1.6 LOW
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-01-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N

Description

HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.

Weakness classification

  • psirt@hcl.com: CWE-434
  • nvd@nist.gov: CWE-434

Primary references