Insecure Sharing of HTML/JS Files in Hubs Cloud Reticulum
Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in the Hub Cloud instance’s primary hosting domain.
Insecure Proxy Configuration in Hubs Cloud Reticulum
Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service.