CVE-2023-6239 | BDVDB-2026-217830 Detail
M-FilesM-Files Server
Description#
Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.
Impact#
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
Weaknesses#
- CWE-281 Improper Preservation of Permissions
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.