HCL Technologies Compass File Upload Vulnerability

2023-10-2000:00:00

China National Vulnerability Database

www.cnvd.org.cn

hcl technologies compass

file upload

vulnerability

validation

uploaded files

arbitrary code

php code

security issue

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

JSON

HCL Technologies Compass is a low-code change management software from HCL Technologies, USA. Manages the full range of testing activities and integration with developer tools. HCL Technologies Compass suffers from a file upload vulnerability that stems from the application’s lack of effective validation of uploaded files. An attacker can exploit this vulnerability to upload a malicious script that executes arbitrary PHP code on the system.

CPENameOperatorVersion
hcl technologies hcl compass >=2.0.0,le2.0.3
hcl technologies hcl compasseq2.1.0
hcl technologies hcl compass >=2.2.0，le2.2.3

Name	Operator	Version
hcl technologies hcl compass >=2.0.0,	le	2.0.3
hcl technologies hcl compass	eq	2.1.0
hcl technologies hcl compass >=2.2.0，	le	2.2.3