CVE-2024-30147 HCL Leap is affected by a cross-site scripting (XSS) vulnerability

April 24, 2025 invoker category_cve

Vulnerability Details

Basic Information

Title CVE-2024-30147 HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Type vulnrichment
Published 2025-04-24T16:21:24
Last Seen 2025-04-24T19:26:24
CVSS Score 6.5 (MEDIUM)

CVSS v3 Details

Attack Vector NETWORK
Attack Complexity LOW
Privileges Required NONE
User Interaction REQUIRED
Scope UNCHANGED
Confidentiality Impact HIGH
Integrity Impact NONE
Availability Impact NONE

CVE Information

CVE IDs CVE-2024-30147
CWE CWE-79
Bulletin Family cve

Description

Multiple vectors in HCL Leap allow client-side
script injection in the authoring environment and deployed applications.

Impact Assessment

Base Score 6.5
Severity MEDIUM

View full CVE details

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.