CVE-2023-5523CWE-829

M-Files Web Companion allows Remote Code Execution

High · published October 20, 2023

CVSS v3.1
8.6
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows

Remote Code Execution

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-829 · Inclusion of Functionality from Untrusted Control Sphere
Published
2023-10-20T06:40Z
EPSS history
Timeline
  • 20 OCT 06:40Z
    M-Files Web Companion allows Remote Code Execution
    cvelistv5