HCL AION Upload Size Limit Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in HCL AION version 2.0, related to improper control and validation of upload size limits. This vulnerability may allow excessive resource consumption, potentially leading to service degradation or denial-of-service conditions under certain scenarios.

Impact

Exploitation of this vulnerability could result in excessive resource consumption, causing service degradation or denial-of-service conditions.

Remediation

Users can upgrade to HCL AION version 2.1.2, which addresses this vulnerability. The HCL AION support team can assist with the upgrade process.