Headline
CVE-2022-39016: Javascript injection in PDFtron in M-Files Hubshare
Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.
Discovered by Michael Newton on behalf of The Missing Link Security
Vulnerability Details
Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload
Affected Versions
Discovered in: 3.3.1.6
Fixed Versions
Fixed in: 3.3.10.9