CVE-2023-3406CWE-22

Path traversal issue in M-Files Classic Web

High · published August 25, 2023

CVSS v3.1
7.7
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00742 · 54.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-08-25T08:11Z
EPSS history
Timeline
  • 25 AUG 08:11Z
    Path traversal issue in M-Files Classic Web
    cvelistv5