Missing access permissions checks
in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export
jobs using the M-Files API methods.
References
Link | Resource |
---|---|
https://https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6189/ | Broken Link |
Configurations
History
30 Nov 2023, 04:58
Type | Values Removed | Values Added |
---|---|---|
References | () https://https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6189/ - Broken Link | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
CPE | cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:* | |
CWE | NVD-CWE-Other |
22 Nov 2023, 13:56
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-11-22 10:15
Updated : 2024-02-05 00:22
NVD link : CVE-2023-6189
Mitre link : CVE-2023-6189
CVE.ORG link : CVE-2023-6189
JSON object : View
Products Affected
m-files
- m-files_server
CWE