HCL MyXalytics Malicious File Upload Vulnerability Allowing Execution of Uploaded Files

A vulnerability allowing malicious file uploads has been identified in HCL MyXalytics. The application improperly validates file uploads, accepting invalid files that include incorrect content types, double extensions, null bytes, and special characters. This flaw enables attackers to upload and execute harmful files.

Impact

Exploitation of this vulnerability could lead to the execution of uploaded malicious files, potentially allowing for further attacks or exploitation of the application or underlying system.