High · 8.6 CVE-2023-5523 EUVD-2023-57836GHSA-94xm-wg2w-cvfq

M-Files Web Companion allows Remote Code Execution

Published Oct 20, 2023 · Updated Feb 23, 2026 · Assigned by M-Files Corporation

Description

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows

Remote Code Execution

Affected products

Vendor	Product	Affected	Fixed
M-Files	Web Companion	23.3 – < 23.10	23.10

References

https://product.m-files.com/security-advisories/cve-2023-5523/ vendor-advisory
https://empower.m-files.com/security-advisories/CVE-2023-5523 vendor-advisory