Medium severity5.4NVD Advisory· Published Nov 28, 2023· Updated Jun 17, 2026

CVE-2023-6239

Description

Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

M Files Corporation"/M-Files Serverllm-create2 versions
<23.11.13168.7+ 1 more
- (no CPE)range: <23.11.13168.7
- (no CPE)range: 23.9

Patches

Vulnerability mechanics

References

empower.m-files.com/security-advisories/CVE-2023-6239nvd
product.m-files.com/security-advisories/cve-2023-6239/nvd
www.m-files.com/about/trust-center/security-advisories/cve-2023-6239/nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000