CVE-2022-39017

Publication date

2022-10-31 20:07:26

Family

TML

State

PUBLISHED

Description

Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.