← Back

CVE-2023-6189

nvd nist
Published: Nov 22, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods.

Affected (1)

M Files
1 product
M Files Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
M Files Server
Before 23.11.13156.0

Related CWEs

CWE-280
Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

References (3)

Source: security@m-files.com
Source: security@m-files.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.