4.7Media
CVE-2025-52643HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment
Descripción
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Debilidad (CWE):
CWE-693
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
Coincidencias CPE (NVD) (1)
cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*≥ 2.0.0 < 2.1.2