CVE-2023-2325

MEDIUM 5.4CVE-2023-2325 · Published 20/10/2023 · updated 17/06/2026

In short

CVE-2023-2325 is a MEDIUM (CVSS 5.4) vulnerability affecting classic web (m-files).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.5% of all vulnerabilities.
Fix: update to 23.10 or later.

Package	Affected versions	Patched versions
classic web m-files	`= 23.2= 23.8< 23.10`	`23.10`

Description

Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.

References

empower.m-files.com/security-advisories/CVE-2023-2325
product.m-files.com/security-advisories/cve-2023-2325
m-files.com/about/trust-center/security-advisories/cve-2023-2325

More vulnerabilities in classic web

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free