CVE-2023-6239

Published: Nov 28, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.

Affected (3)

Products: M Files: M Files Server

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
M Files M Files Server	From 23.11 to 23.11.13168.7
M Files M Files Server	Version 23.10
M Files M Files Server	Version 23.9

Related CWEs

Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (3)

https://empower.m-files.com/security-advisories/CVE-2023-6239

Source: security@m-files.com

https://product.m-files.com/security-advisories/cve-2023-6239/

Source: security@m-files.com

https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6239/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.