CVE-2024-9174: Stored HTML Injection in Hubshare social module
Published Oct 2, 2024
·Updated
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI
Affected Software
2 affected components
M-Files Hubshare<5.0.8.6
M-Files Hubshare<5.0.8.6
Event History
Oct 2, 2024
CVE Published
via MITRE·05:56 AM
Data Sourced
via MITRE·05:56 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-9174?
CVE-2024-9174 has a medium severity rating due to its potential for UI spoofing.
2
How do I fix CVE-2024-9174?
To mitigate CVE-2024-9174, upgrade M-Files Hubshare to version 5.0.8.6 or later.
3
Who is affected by CVE-2024-9174?
CVE-2024-9174 affects authenticated users of M-Files Hubshare versions prior to 5.0.8.6.
4
What kind of vulnerability is CVE-2024-9174?
CVE-2024-9174 is a stored HTML injection vulnerability allowing UI spoofing.
5
When was CVE-2024-9174 disclosed?
CVE-2024-9174 was disclosed in 2024 as part of security advisories for M-Files Hubshare.