Description
Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| M-Files | Hubshare | 3.3.1.6 | — |
High · 8.2
CVE-2022-39018
EUVD-2022-41564GHSA-qp9r-pfqf-hxf3
Broken access controls on PDFtron data in M-Files Hubshare
Published Oct 31, 2022 · Updated May 2, 2025 · Assigned by TML