Volerion logoVolerion
Volerion logoVolerion

HCL Leap Improper SVG File Sanitization Vulnerability Allowing Client-Side Script Injection

Vulnerability

A vulnerability exists in HCL Leap versions 9.0 through 9.3.8 due to improper sanitization of SVG files. This flaw allows client-side script injection in applications deployed through HCL Leap.

Impact

Exploitation of this vulnerability could lead to client-side script injection, allowing for the execution of malicious scripts in the context of the user's browser.

Remediation

Users can upgrade to HCL Leap version 9.3.1 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.8
impact
1.7
exploitability
5.0
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.