Vulnerability Description
Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server
CVSS Score
7.7
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| M-Files | Classic Web | < 23.2 |
Related Weaknesses (CWE)
References
- https://empower.m-files.com/security-advisories/CVE-2023-3406
- https://product.m-files.com/security-advisories/cve-2023-3406/
- https://www.m-files.com/about/trust-center/security-advisories/cve-2023-3406
FAQ
What is CVE-2023-3406?
CVE-2023-3406 is a vulnerability with a CVSS score of 7.7 (HIGH). Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server
How severe is CVE-2023-3406?
CVE-2023-3406 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-3406?
Check the references section above for vendor advisories and patch information. Affected products include: M-Files Classic Web.