CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:H/VI:N/SI:H/VA:N/SA:N/U:Green/RE:M
EPSS
Percentile
19.7%
A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 andΒ LTS 24.2.13421.15 SR2 andΒ LTS 23.8.12892.0 SR6 allows authenticated user to read files
[
{
"defaultStatus": "unaffected",
"product": "M-Files Server",
"vendor": "M-Files Corporation",
"versions": [
{
"lessThan": "24.8.13981.0",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "LTS 24.2.13421.15 SR2",
"status": "affected",
"version": "LTS 24.2.0",
"versionType": "custom"
},
{
"lessThan": "LTS 23.8.12892.0 SR6",
"status": "affected",
"version": "LTS 23.8.0",
"versionType": "custom"
}
]
}
]