← Back

Classic Web

classic_web

Vendor: M Files • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-2325
1M Files
1Classic Web
Jun 17, 2026
Oct 20, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.
CVE-2023-3425
1M Files
1Classic Web
Jun 17, 2026
Aug 25, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.
CVE-2023-3406
1M Files
1Classic Web
Jun 17, 2026
Aug 25, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server