Lucene search
M-Files CorporationVULNRICHMENT:CVE-2024-6789HistoryAug 27, 2024 - 9:57 a.m.
CVE-2024-6789 Path traversal in M-Files API
2024-08-2709:57:00
CWE-22
M-Files Corporation
github.com
1
cve-2024-6789
path traversal
m-files api
security issue
file access
authentication
CVSS4
8.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:H/VI:N/SI:H/VA:N/SA:N/U:Green/RE:M
EPSS
0.001
Percentile
19.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files
Related
cve
cve
CVE-2024-6789
2024-08-27 10:15:05
cvelist
cvelist
CVE-2024-6789 Path traversal in M-Files API
2024-08-27 09:57:00
nvd
nvd
CVE-2024-6789
2024-08-27 10:15:05
CVSS4
8.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:H/VI:N/SI:H/VA:N/SA:N/U:Green/RE:M
EPSS
0.001
Percentile
19.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-6789