CVE-2022-39017 - XSS in all comments fields in M-Files Hubshare

Back Back to CVE browser

HIGH

XSS in all comments fields in M-Files Hubshare

Published Oct 31, 2022

8.2

HIGH

CVSS 3.1

EPSS 0.40%

Description

Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.

Affected products

Vendor M-Files Product Hubshare Default
unaffected
Affected
- 3.3.1.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
M-Files	Hubshare	unaffected	Affected 3.3.1.6

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41563
Advisory
https://www.themissinglink.com.au/security-advisories/cve-2022-39017
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41563		Advisory
https://www.themissinglink.com.au/security-advisories/cve-2022-39017		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TML

Published Oct 31, 2022

Updated May 2, 2025

Reserved Aug 30, 2022

Link CVE-2022-39017

CISA Vulnrichment

Updated May 2, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-39017

Red Hat

No data

ENISA EUVD

Assigner TML

Published Oct 31, 2022

Updated May 2, 2025

Link EUVD-2022-41563

GitHub

No data