Description
Missing access permissions checks
in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export
jobs using the M-Files API methods.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| M-Files | M-Files Server | < 23.11.13156.0 | 23.11.13156.0 |
References
- https://product.m-files.com/security-advisories/cve-2023-6189/ vendor-advisory
- https://empower.m-files.com/security-advisories/CVE-2023-6189 vendor-advisory