Lucene search

M-Files CorporationCVE-2023-5523

HistoryOct 20, 2023 - 7:15 a.m.

CVE-2023-5523

2023-10-2007:15:17

CWE-829

M-Files Corporation

web.nvd.nist.gov

cve

2023

5523

m-files

web companion

remote code execution

nvd

CVSS3

8.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

40.3%

JSON

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows

Remote Code Execution

Affected configurations

Nvd

Node

m-filesweb_companionRange<23.8lts

m-filesweb_companionRange23.3–23.10-

m-filesweb_companionMatch23.8-lts

VendorProductVersionCPE
m-filesweb_companion*cpe:2.3:a:m-files:web_companion:*:*:*:*:lts:*:*:*
m-filesweb_companion*cpe:2.3:a:m-files:web_companion:*:*:*:*:-:*:*:*
m-filesweb_companion23.8cpe:2.3:a:m-files:web_companion:23.8:-:*:*:lts:*:*:*

Vendor	Product	Version	CPE
m-files	web_companion	*	cpe:2.3:a:m-files:web_companion:::::lts:::*
m-files	web_companion	*	cpe:2.3:a:m-files:web_companion:::::-:::*
m-files	web_companion	23.8	cpe:2.3:a:m-files:web_companion:23.8:-:::lts:::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Web Companion",
    "vendor": "M-Files",
    "versions": [
      {
        "lessThan": "23.10",
        "status": "affected",
        "version": "23.3",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "23.8 LTS SR1"
      }
    ]
  }
]

References

product.m-files.com/security-advisories/cve-2023-5523/

CVSS3

8.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

40.3%

JSON

Related for CVE-2023-5523