VULNERABILITY INTELLIGENCE
CVE-2023-3425
CVSS score6.5 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2023-08-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
Description
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.
Weakness classification
- security@m-files.com: CWE-125
- nvd@nist.gov: CWE-125