CVE-2023-3406

Summary

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

Affected Software

Weaknesses

• CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CVE Program Container

Additional References

• https://www.m-files.com/about/trust-center/security-advisories/cve-2023-3406

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://product.m-files.com/security-advisories/cve-2023-3406/
• https://empower.m-files.com/security-advisories/CVE-2023-3406

• ←Previous
• Next→