low1.6
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability.
Impact
HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Dryice Myxalytics | Version 6.3 |