← Database

CVE-2022-39017

HIGH CVSS: 8.2 Published: 2022-10-31 Modified: 2026-06-17

Description

Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.

Affected Platforms

M-Files Hubshare

Weakness Type

CWE-20, CWE-79, CWE-79

References