Insecure Proxy Configuration in Hubs Cloud Reticulum
Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service.
Insecure Sharing of HTML/JS Files in Hubs Cloud Reticulum
Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in the Hub Cloud instance’s primary hosting domain.