Today > 1 Critical | 2 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-6881

July 29, 2024, 2:12 p.m.

Tags

CWE-79
security@m-files.com
2024-07-29
CVE-2024-6881

Product(s) Impacted

M-Files Hubshare

  • before 5.0.6.0

Description

Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session

Weaknesses

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CWE ID: 79

Date

Published: July 29, 2024, 1:15 p.m.

Last Modified: July 29, 2024, 2:12 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

security@m-files.com

References

https://www.m-files.com/ security@m-files.com