CVE-2024-5142: XSS Vulnerability in Hubsharer

DESCRIPTION:

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 3.0.5.8 allows authenticated attacker to run scripts in other users browser

AFFECTED PRODUCTS:

M-Files Hubshare before 3.0.5.8

MORE INFORMATION:

Certain input values could be used to cause M-Files Server to consume excessive amount of time to process.

CVSS 4.0 Base Score: 7.0
CVSS 4.0 Base+Threat Score: 4.7

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC: CAPEC-592: Stored XSS

Internal ID: -
Date issued: 2024-05-24

EXPLOITABILITY

Publicly disclosed: No
Exploited: No
Probability of exploitation: low - responsibly reported

LINKS

https://www.cve.org/CVERecord?id=CVE-2024-5142

HISTORY

2024-05-24 Published