PT-2024-39472 · M Files · M-Files Hubshare

Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 5.0.8.6 Description: The issue allows an authenticated user to spoof the UI through stored HTML injection in the Social Module. Recommendations: For versions prior to 5.0.8.6, update to version 5.0.8.6 or...

CVE-2024-6789

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files...

CVE-2024-6789

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files...

CVE-2024-6789

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files...

CVE-2024-6789 Path traversal in M-Files API

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files...

CVE-2024-6789

CVE-2024-6789 describes a path traversal flaw in the API endpoint of M-Files Server that allows an authenticated user to read files. Affected products/versions are: M‑Files Server before 24.8.13981.0, M‑Files Server LTS before 24.2.13421.15 SR2, and M‑Files Server LTS before 23.8.12892.0 SR6. The...

PT-2024-37864

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 24.8.13981.0 M-Files Server LTS versions prior to 24.2.13421.15 SR2 M-Files Server LTS versions prior to 23.8.12892.0 SR6 Description A path traversal issue in the API endpoint of M-Files Server allows an...

M-Files Server 路径遍历漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A path traversal vulnerability exists in M-Files Server version 24.8.13981.0, which stems from the presence of a path traversal vulnerability...

CVE-2024-6881

Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...

CVE-2024-6124

Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

CVE-2024-6881

Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...

CVE-2024-6881

Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...

CVE-2024-6124

Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

CVE-2024-6124

Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

CVE-2024-6124

CVE-2024-6124 describes a reflected XSS in M‑Files Hubshare prior to version 5.0.6.0 . The vulnerability allows an attacker to execute arbitrary JavaScript in the context of the victim’s browser session. The available sources confirm the affected product and the root cause is a reflected cross‑si...

CVE-2024-6124 Reflected XSS in Hubshare via Open Redirect

Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

CVE-2024-6124 Reflected XSS in Hubshare via Open Redirect

Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

CVE-2024-6881 Stored XSS Vulnerability

Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...

CVE-2024-6881 Stored XSS Vulnerability

Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...

CVE-2024-6881

CVE-2024-6881 concerns a stored XSS in M-Files Hubshare prior to version 5.0.6.0 . The issue allows an authenticated attacker to execute arbitrary JavaScript in a user’s browser session. Affected component is the Hubshare web interface; root cause is a stored XSS condition in the application flow...