Lucene search
HistoryAug 27, 2024 - 10:15 a.m.
CVE-2024-6789
path traversal
api endpoint
m-files server
authenticated user
read files
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
19.7%
A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files
Affected configurations
Node
m-filesm-files_serverRange<24.2.13421.15lts
ORm-filesm-files_serverRange<24.8.13981.0-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| m-files | m-files_server | * | cpe:2.3:a:m-files:m-files_server:*:*:*:*:lts:*:*:* |
| m-files | m-files_server | * | cpe:2.3:a:m-files:m-files_server:*:*:*:*:-:*:*:* |
Related
cve
cve
CVE-2024-6789
2024-08-27 10:15:05
vulnrichment
vulnrichment
CVE-2024-6789 Path traversal in M-Files API
2024-08-27 09:57:00
cvelist
cvelist
CVE-2024-6789 Path traversal in M-Files API
2024-08-27 09:57:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
19.7%
Related for NVD:CVE-2024-6789