CVE-2024-6789

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files

Score

CVSS 4.0 8.4 High

Status

Modified - security@m-files.com

Published

2024-08-27

Last modified

2026-02-23

Weaknesses

CWE-22

Affected products

• M-files Server (M-files)
• M-files Server (M-files Corporation)

References

• https://empower.m-files.com/security-advisories/CVE-2024-6789
• https://product.m-files.com/security-advisories/cve-2024-6789/