← CVE Intelligence

CVE-2022-39016

Javascript injection in PDFtron in M-Files Hubshare PUBLISHED

Description (CNA)

Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.

Affected (CNA)

Vendor / productVersions
M-Files / Hubshareaffected 3.3.1.6

CWE

CWE-20, CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.