CVE-2023-3406 — Path traversal issue in M-Files Classic Web

CVE-2023-3406

Path traversal issue in M-Files Classic Web PUBLISHED

Description (CNA)

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

Affected (CNA)

Vendor / product	Versions
M-Files / M-Files Web	affected 0 before 23.6.12695.3; unaffected 23.2.12340.14

CWE

CWE-22

References

https://product.m-files.com/security-advisories/cve-2023-3406/
https://empower.m-files.com/security-advisories/CVE-2023-3406

ADP enrichment

CVE

No English description supplied.

https://www.m-files.com/about/trust-center/security-advisories/cve-2023-3406

CISA-ADP

No English description supplied.

No references supplied.