CVE-2023-3406

MEDIO 6.5CVE-2023-3406 · Published 25/08/2023 · updated 17/06/2026

In breve

CVE-2023-3406 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda classic web (m-files).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.74%, superiore al 54.7% delle vulnerabilità.
Correzione: aggiornare a 23.2, 23.6.12695.3 o successiva.

Package	Affected versions	Patched versions
classic web m-files	`= 23.2< 23.2< 23.6.12695.3`	`23.223.6.12695.3`

Description

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

References

empower.m-files.com/security-advisories/CVE-2023-3406
product.m-files.com/security-advisories/cve-2023-3406
m-files.com/about/trust-center/security-advisories/cve-2023-3406

Altre vulnerabilità di classic web

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free