Vulnerability Details CVE-2023-6189
Missing access permissions checks
in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export
jobs using the M-Files API methods.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.1%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2023-6189
-
cpe:2.3:a:m-files:m-files_server:-
-
cpe:2.3:a:m-files:m-files_server:22.11.12011.0
-
cpe:2.3:a:m-files:m-files_server:22.12.12140.3
-
cpe:2.3:a:m-files:m-files_server:22.2.11051.0
-
cpe:2.3:a:m-files:m-files_server:22.3.11237.3
-
cpe:2.3:a:m-files:m-files_server:22.6.11534.4
-
cpe:2.3:a:m-files:m-files_server:23.4.12455.0
-
cpe:2.3:a:m-files:m-files_server:23.4.12528.1
-
cpe:2.3:a:m-files:m-files_server:23.6.12695.3
-
cpe:2.3:a:m-files:m-files_server:23.9