CVE-2023-5524
M-Files Web Companion allows Remote Code Execution for some filetypes
Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types
CVSS 3.1 · 8.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products