Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-10126

Local file inclusion vulnerability in M-Files Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
M-Files Corporation

Description

Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7) allows an authenticated user to read server local files of a limited set of filetypes via document preview.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

M-Files Corporation" M-Files Server

Default version status: unaffected

  • 0 to < 24.11affected
  • 23.8 SR7unaffected
  • 24.2 SR3unaffected
  • 24.8 SR1unaffected

References