CVE-2023-3406

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Aug 25, 2023
Source updated: Feb 23, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Path traversal issue in M-Files Classic Web

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

M-Files Web

Vendor: M-Files
Product: M-Files Web
Platforms: Unknown
Default status: unaffected

M-Files Web · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	23.6.12695.3	Unavailable	None listed
23.2.12340.14	`unaffected`	Unavailable	Unavailable	Unavailable	None listed