CVE-2024-9174

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI

Score

CVSS 4.0 6.9 Medium

Status

Modified - security@m-files.com

Published

2024-10-02

Last modified

2026-02-23

Weaknesses

CWE-79

Affected products

• Hubshare (M-files)
• M-files Hubshare (M-files Corporation)

References

• https://empower.m-files.com/security-advisories/CVE-2024-9174
• https://product.m-files.com/security-advisories/cve-2024-9174/