VYPR
← All advisories
High severity7.6NVD Advisory· Published Jan 3, 2024· Updated Jun 17, 2026

CVE-2023-45723

CVE-2023-45723

Description

HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability.  Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.

Affected products

5
  • HCLTech/Dryice Myxalytics3 versions
    cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:*
  • HCL Software/MyXalyticsllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 5.9, 6.0, 6.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.