← Database

CVE-2022-39016

HIGH CVSS: 8.2 Published: 2022-10-31 Modified: 2026-06-17

Description

Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.

Affected Platforms

M-Files Hubshare

Weakness Type

CWE-20, CWE-79, CWE-74

References