Description
A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| M-Files | M-Files Server | < 24.8.13981.0, LTS 24.2.0 – < LTS 24.2.13421.15 SR2, LTS 23.8.0 – < LTS 23.8.12892.0 SR6 | 24.8.13981.0 |
Advisories 1
- WID-SEC-2024-1962 M-Files Server: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 1, 2024
References
- https://product.m-files.com/security-advisories/cve-2024-6789/ vendor-advisory
- https://empower.m-files.com/security-advisories/CVE-2024-6789 vendor-advisory