CVE-2023-3406

6.5 mediumEPSS 0.7%

Medium (6.5) in m-files classic web. EPSS 0.7% chance of exploitation in the next 30 days.

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2023-08-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

m-files:classic_web

References

https://empower.m-files.com/security-advisories/CVE-2023-3406
https://product.m-files.com/security-advisories/cve-2023-3406/
https://www.m-files.com/about/trust-center/security-advisories/cve-2023-3406

Check your stack JSON