CVE-2024-6881
July 29, 2024, 2:12 p.m.
Tags
Product(s) Impacted
M-Files Hubshare
- before 5.0.6.0
Description
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session
Weaknesses
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE ID: 79Date
Published: July 29, 2024, 1:15 p.m.
Last Modified: July 29, 2024, 2:12 p.m.
Status : Awaiting Analysis
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
More infoSource
security@m-files.com
References
security@m-files.com