← CVE Intelligence

CVE-2022-39017

XSS in all comments fields in M-Files Hubshare PUBLISHED

Description (CNA)

Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.

Affected (CNA)

Vendor / productVersions
M-Files / Hubshareaffected 3.3.1.6

CWE

CWE-20, CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.