CVSS: 8.2EPSS: 0%CPEs: 3EXPL: 0CVE-2023-5524 – M-Files Web Companion allows Remote Code Execution for some filetypes
https://notcve.org/view.php?id=CVE-2023-5524
Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types Lista negra insuficiente en M-Files Web Companion antes de la versión 23.10 y en las versiones de lanzamiento del servicio LTS anteriores a 23.8 LTS SR1 permite la ejecución remota de código a través de tipos de archivos específicos • https://www.m-files.com/about/trust-center/security-advisories/cve-2023-5524 https://product.m-files.com/security-advisories/cve-2023-5524 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2023-5523 – M-Files Web Companion allows Remote Code Execution
https://notcve.org/view.php?id=CVE-2023-5523
Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution Ejecución de falla de contenido descargado en M-Files Web Companion antes de la versión 23.10 y versiones de lanzamiento del servicio LTS anteriores a 23.8 LTS SR1 permite la ejecución remota de código • https://www.m-files.com/about/trust-center/security-advisories/cve-2023-5523 https://product.m-files.com/security-advisories/cve-2023-5523 • CWE-829: Inclusion of Functionality from Untrusted Control Sphere •