Lucene search

M-Files CorporationVULNRICHMENT:CVE-2023-4479

HistoryMar 04, 2024 - 7:17 a.m.

CVE-2023-4479 Stored XSS Vulnerability in M-Files Web

2024-03-0407:17:20

CWE-79

M-Files Corporation

github.com

cve-2023-4479

stored xss

m-files web

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period.

References

product.m-files.com/security-advisories/cve-2023-4479/

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-4479