CVE-2023-6189 — Improper Permission Handling in M-Files Server

CVE-2023-6189

Improper Permission Handling in M-Files Server PUBLISHED

Description (CNA)

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods.

Affected (CNA)

Vendor / product	Versions
M-Files / M-Files Server	affected 0 before 23.11.13156.0

CWE

CWE-280

References

https://product.m-files.com/security-advisories/cve-2023-6189/
https://empower.m-files.com/security-advisories/CVE-2023-6189

ADP enrichment

CVE

No English description supplied.

https://https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6189/