CVE-2023-3425

CVE-2023-3425 affects M-Files Server: out-of-bounds read allowing an unauthenticated user to read a restricted number of bytes from memory. Affected versions are M-Files Server

CVE-2023-3406

Based on the documents, CVE-2023-3406 is a path-traversal issue in M-Files Classic Web affecting versions below 23.6.12695.3 and LTS SRs before 23.2 SR3. An authenticated user can read some restricted files on the web server via a path traversal vulnerability. The vulnerability is caused by impro...

CVE-2023-2325

CVE-2023-2325 affects M-Files Classic Web: Stored XSS that allows script execution in a user’s browser via stored HTML documents. Vulnerable on Classic Web before 23.10, LTS SR versions before 23.2 LTS SR4 and before 23.8 LTS SR1. Mitigation: upgrade to 23.10 or later (Classic Web), 23.2 LTS SR4 ...