4.7Mittel
CVE-2025-52643HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment
Beschreibung
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Schwachstellentyp (CWE):
CWE-693
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
CPE-Treffer (NVD) (1)
cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*≥ 2.0.0 < 2.1.2