Medium · 6.5 CVE-2023-3425 EUVD-2023-44091GHSA-fx24-f32v-56xf

CVE-2023-3425: Out-of-Bounds memory read

Published Aug 25, 2023 · Updated Feb 23, 2026 · Assigned by M-Files Corporation

Description

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.

Affected products

Vendor	Product	Affected	Fixed
M-Files	M-Files Server	< 23.8.12892.6	23.8.12892.6

References

https://product.m-files.com/security-advisories/cve-2023-3425/ vendor-advisory
https://empower.m-files.com/security-advisories/CVE-2023-3425 vendor-advisory