CVE-2024-5142

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-5142
Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser

5.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://empower.m-files.com/security-advisories/CVE-2024-5142
https://product.m-files.com/security-advisories/cve-2024-5142/ Vendor Advisory
https://www.m-files.com/about/trust-center/security-advisories/cve-2024-5142/ Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:m-files:hubshare:*:*:*:*:*:*:*:*
History

23 Feb 2026, 11:16

Type Values Removed Values Added
First Time M-files hubshare
M-files
CPE cpe:2.3:a:m-files:hubshare:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.4
References
  • () https://empower.m-files.com/security-advisories/CVE-2024-5142 -
References () https://product.m-files.com/security-advisories/cve-2024-5142/ - () https://product.m-files.com/security-advisories/cve-2024-5142/ - Vendor Advisory
References () https://www.m-files.com/about/trust-center/security-advisories/cve-2024-5142/ - () https://www.m-files.com/about/trust-center/security-advisories/cve-2024-5142/ - Broken Link

21 Nov 2024, 09:47

Type Values Removed Values Added
References
  • () https://www.m-files.com/about/trust-center/security-advisories/cve-2024-5142/ -

27 Aug 2024, 11:15

Type Values Removed Values Added
Summary (en) Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.3.8 allows authenticated attacker to run scripts in other users browser (en) Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser

23 Aug 2024, 14:15

Type Values Removed Values Added
References
  • {'url': 'https://www.m-files.com/about/trust-center/security-advisories/cve-2024-5142/', 'source': 'security@m-files.com'}
  • () https://product.m-files.com/security-advisories/cve-2024-5142/ -

24 May 2024, 13:03

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de Cross-Site Scripting almacenadas en Social Module in M-Files Hubshare anterior a la versión 5.0.3.8 permite a un atacante autenticado ejecutar scripts en el navegador de otros usuarios

24 May 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-24 06:15

Updated : 2026-02-23 11:16

NVD link : CVE-2024-5142

Mitre link : CVE-2024-5142

CVE.ORG link : CVE-2024-5142

JSON object : View

Products Affected

m-files

  • hubshare
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')