CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-4862
Severity
MEDIUM
CVSS
5
EPSS
0.36%
Original NVD Description
Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sensitive information. This issue affects M-Files New Web: before 22.12.12140.3.
Related CVEs
Other vulnerabilities affecting the same vendor(s)