A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files
Metrics
Affected Vendors & Products
References
History
Mon, 16 Sep 2024 06:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 allows authenticated user to read files | A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files |
Fri, 06 Sep 2024 23:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
M-files
M-files m-files Server |
|
CPEs | cpe:2.3:a:m-files:m-files_server:*:*:*:*:-:*:*:* cpe:2.3:a:m-files:m-files_server:*:*:*:*:lts:*:*:* |
|
Vendors & Products |
M-files
M-files m-files Server |
|
Metrics |
cvssV3_1
|
Tue, 27 Aug 2024 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 27 Aug 2024 10:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 allows authenticated user to read files | |
Title | Path traversal in M-Files API | |
Weaknesses | CWE-22 | |
References |
| |
Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: M-Files Corporation
Published: 2024-08-27T09:57:00.441Z
Updated: 2024-09-16T06:19:05.367Z
Reserved: 2024-07-16T12:19:08.442Z
Link: CVE-2024-6789
Vulnrichment
Updated: 2024-08-27T13:13:38.861Z
NVD
Status : Modified
Published: 2024-08-27T10:15:05.460
Modified: 2024-09-16T07:15:03.877
Link: CVE-2024-6789
Redhat
No data.