CVE-2022-39019 Broken access controls on PDFtron WebviewerUI in M-Files Hubshare

Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server...

CVE-2022-39019

CVE-2022-39019 affects M-Files Hubshare prior to 3.3.11.3, with broken access controls in PDFtron WebviewerUI allowing unauthenticated attackers to upload malicious files to the application server. Multiple sources (NVD, CVE listings, PT-SECURITY) corroborate the issue and version range. The root...