← Database

CVE-2022-39019

MEDIUM CVSS: 6.3 Published: 2022-10-31 Modified: 2026-06-17

Description

Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server.

Affected Platforms

M-Files Hubshare

Weakness Type

CWE-287, CWE-434, NVD-CWE-Other

References