CVE-2023-6189CWE-280

Improper Permission Handling in M-Files Server

Medium · published November 22, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

Missing access permissions checks

in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export

jobs using the M-Files API methods.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2023-11-22T09:56Z
EPSS history
Timeline
  • 22 NOV 09:56Z
    Improper Permission Handling in M-Files Server
    cvelistv5