NetSight
high8.2

CVE-2023-5524

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Executi…

Impact

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types

Affected products

VendorProductAffected versions
M-FilesWeb Companion
before 23.8
from 23.3 before 23.10
Version 23.8

Weakness classification

References