CVE-2022-39019

Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server.

Score

CVSS 3.1 7.5 High

Status

Modified - vdp@themissinglink.com.au

Published

2022-10-31

Last modified

2025-05-02

Weaknesses

CWE-287, CWE-434

Affected products

• Hubshare (M-files)

References

• https://www.themissinglink.com.au/security-advisories/cve-2022-39019