NetSight
high8.2

CVE-2022-39017

Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-sit…

Impact

Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.

Affected products

VendorProductAffected versions
M-FilesHubshare
before 3.3.10.9

Weakness classification

References