Lucene search
HistoryJul 29, 2024 - 1:15 p.m.
CVE-2024-6881
stored xss
m-files hubshare
version 5.0.6.0
authenticated attacker
arbitrary javascript
browser session
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.5%
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user’s browser session
Affected configurations
Node
m-fileshubshareRange<5.0.6.0
Related
cve
cve
CVE-2024-6881
2024-07-29 13:15:10
cvelist
cvelist
CVE-2024-6881 Stored XSS Vulnerability
2024-07-29 12:56:51
vulnrichment
vulnrichment
CVE-2024-6881 Stored XSS Vulnerability
2024-07-29 12:56:51
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.5%
Related for NVD:CVE-2024-6881