Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: M-Files Corporation Component: Web Companion Clear all filters
TI-2023-05083 CVE-2023-5524 · GHSA-r2vj-428g-v68v

M-Files Web Companion allows Remote Code Execution for some filetypes

Priority LOW 38

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00329 Published 2023-10-20 Fixed in 23.10, 23.8 LTS SR1 CWE-434
TI-2023-05082 CVE-2023-5523 · GHSA-94xm-wg2w-cvfq

M-Files Web Companion allows Remote Code Execution

Priority LOW 39

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00342 Published 2023-10-20 Fixed in 23.10, 23.8 LTS SR1 CWE-829