Skip to content
OpenAdvisories

Product · M-Files

Hubshare

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.0
    CVE-2025-9826

    Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cau…

    M-Files Hubshare
  • High 8.5
    CVE-2024-6124

    Reflected XSS in Hubshare via Open Redirect

    Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session

    M-Files Hubshare
  • High 8.5
    CVE-2024-6881

    Stored XSS Vulnerability

    Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session

    M-Files Hubshare
  • High 7.0
    CVE-2024-5142

    XSS in Hubshare's social module

    Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser

    M-Files Hubshare
  • High 8.2
    CVE-2022-39018

    Broken access controls on PDFtron data in M-Files Hubshare

    Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL.

    M-Files Hubshare
  • High 8.2
    CVE-2022-39017

    XSS in all comments fields in M-Files Hubshare

    Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.

    M-Files Hubshare
  • High 8.2
    CVE-2022-39016

    Javascript injection in PDFtron in M-Files Hubshare

    Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.

    M-Files Hubshare