CVE Catalog
CVE-2023-3425
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.54%
41th percentile - higher than 41% of all known CVEs
Summary
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.
Risk Assessment
The organization may be exposed to sensitive data leakage, potentially leading to privacy and information security breaches.
Recommendation
It is recommended to update M-Files Server to version 23.8.12892.6 or later and to LTS SR3 or later to mitigate this vulnerability.
Original NVD description (English source)
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.