CVE-2023-2325CWE-79

Stored XSS Vulnerability in M-Files Classic Web

High · published October 20, 2023

CVSS v3.1
7.3
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-10-20T06:39Z
EPSS history
Timeline
  • 20 OCT 06:39Z
    Stored XSS Vulnerability in M-Files Classic Web
    cvelistv5