High severity7.7NVD Advisory· Published Aug 25, 2023· Updated Jun 17, 2026

CVE-2023-3406

Description

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

M Files Corporation"/Classic Web4 versions
cpe:2.3:a:m-files:classic_web:*:*:*:*:-:*:*:*+ 3 more
- cpe:2.3:a:m-files:classic_web:*:*:*:*:-:*:*:*range: <23.6.12695.3
- cpe:2.3:a:m-files:classic_web:*:*:*:*:lts:*:*:*range: <23.2
- cpe:2.3:a:m-files:classic_web:23.2:-:*:*:lts:*:*:*
- (no CPE)range: <23.6.12695.3
M Files Corporation"/LTS Service Release Versionsllm-create
Range: <23.2 LTS SR3
M Files Corporation"/M Files Webcpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

empower.m-files.com/security-advisories/CVE-2023-3406nvd
product.m-files.com/security-advisories/cve-2023-3406/nvd
www.m-files.com/about/trust-center/security-advisories/cve-2023-3406nvd

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000