4.7Orta
CVE-2025-52643HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment
Açıklama
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Zayıflık türü (CWE):
CWE-693
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*≥ 2.0.0 < 2.1.2