Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-9174

Oct. 4, 2024, 1:50 p.m.

Tags

CWE-79
security@m-files.com
2024-10-02
CVE-2024-9174

Product(s) Impacted

M-Files Hubshare

  • before 5.0.8.6

Description

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI

Weaknesses

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CWE ID: 79

Date

Published: Oct. 2, 2024, 6:15 a.m.

Last Modified: Oct. 4, 2024, 1:50 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

security@m-files.com

References

https://product.m-files.com/ security@m-files.com