Description
Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| M-Files | Hubshare | 3.3.1.6 | — |
High · 8.2
CVE-2022-39016
EUVD-2022-41562GHSA-ffj3-j67f-53c8
Javascript injection in PDFtron in M-Files Hubshare
Published Oct 31, 2022 · Updated May 6, 2025 · Assigned by TML