CVE-2023-2325
High
Description
Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.
SeverityHigh
CVSS7.3
Exploit probability—
ProductM-files Classic Web
PublishedOct 20, 2023
First seenOct 20, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- m-files classic_web23.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| m-files classic_web | v < 23.10, 23.2, 23.8 | 23.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.