CVE-2023-5523

HIGH

M-Files Web Companion < 23.10 and < 23.8 LTS SR1 - Remote Code Execution via Downloaded Content Execution

Title source: llm
STIX 2.1

Description

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution

References (3)

Core 3

Scores

CVSS v3 8.6
EPSS 0.0033
EPSS Percentile 24.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-829
Status published
Products (3)
m-files/web_companion 23.8
m-files/web_companion < 23.8
m-files/web_companion 23.3 - 23.10
Published Oct 20, 2023
Tracked Since Feb 18, 2026