CVE-2023-3406 Path traversal issue in M-Files Classic Web

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server...

CVE-2023-3406 Path traversal issue in M-Files Classic Web

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server...

CVE-2023-3406

Based on the documents, CVE-2023-3406 is a path-traversal issue in M-Files Classic Web affecting versions below 23.6.12695.3 and LTS SRs before 23.2 SR3. An authenticated user can read some restricted files on the web server via a path traversal vulnerability. The vulnerability is caused by impro...

CVE-2023-3425

CVE-2023-3425 affects M-Files Server: out-of-bounds read allowing an unauthenticated user to read a restricted number of bytes from memory. Affected versions are M-Files Server

CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

PT-2023-24657 · M Files · M-Files Classic Web

Name of the Vulnerable Software and Affected Versions: M-Files Classic Web versions below 23.6.12695.3 M-Files Classic Web LTS Service Release Versions before 23.2 LTS SR3 Description: The issue allows an authenticated user to read some restricted files on the web server due to a Path Traversal...

PT-2023-24773 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.8.12892.6 M-Files Server LTS Service Release Versions prior to 23.2 LTS SR3 Description: The issue is an out-of-bounds read that allows an unauthenticated user to read a restricted amount of bytes from...

CVE-2023-3406: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server...

M-Files 路径遍历漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files Classic Web versions prior to 23.6.12695.3, which stems from a path traversal issue that allows an authenticated user to read certain restricted files on the web...

M-Files 缓冲区错误漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files Classic Web versions prior to 23.6.12695.3 that stems from an out-of-bounds read issue that allows an unauthenticated user to read a limited number of bytes from...

CVE-2023-3425: Out-of-bounds Read

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

CVE-2023-28533

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in M Williams Cab Grid plugin = 1.5.15 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in M Williams Cab Grid plugin = 1.5.15 versions...

CVE-2023-28533

CVE-2023-28533 (Cab Grid) : WordPress Cab Grid plugin

CVE-2023-28533 WordPress Cab Grid Plugin <= 1.5.15 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in M Williams Cab Grid plugin = 1.5.15 versions...

PT-2023-21782

Name of the Vulnerable Software and Affected Versions M Williams Cab Grid plugin versions prior to 1.5.16 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations For versions prior to 1.5.16, update t...

CVE-2023-28533: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in M Williams Cab Grid plugin = 1.5.15 versions...

CVE-2023-39964 1Panel O&M management panel has a background arbitrary file reading vulnerability

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the...

CVE-2023-39964 1Panel O&M management panel has a background arbitrary file reading vulnerability

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the...