CVE-2024-30143

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the computer where the application is running.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Mar 13, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-301456.1Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed application CVE-2024-301462.7Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.CVE-2024-301476.1Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.CVE-2024-301484.1Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem.CVE-2024-301496.5HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable.CVE-2024-30158.8A vulnerability classified as critical was found in SourceCodester Simple Subscription Website 1.0. Affected by this vulnerability is an unk CVE-2024-301509.1HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information dis CVE-2024-301518.3HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow u CVE-2024-301529.8HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive info CVE-2024-301545.7HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions CVE-2024-301554.3HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to t CVE-2024-301567.5Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhausti