Hubshare vulnerabilities

3 known vulnerabilities in Hubshare from M-Files. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Hubshare: Improper Authentication

  CVE-2022-39019Oct 31, 2022M-Files

  Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server.

• 7.5 High severity

  Hubshare: Improper Authentication

  CVE-2022-39018Oct 31, 2022M-Files

  Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL.

• 8.8 High severity

  Hubshare: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2022-39016Oct 31, 2022M-Files

  Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.