PT-2023-15884 · M Files · M-Files Web+1
CVE-2022-4862
·
Published
2023-03-06
·
Updated
2026-02-23
CVSS v3.1
7.6
High
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
M-Files Web versions prior to 22.12.12140.3
M-Files New Web versions prior to 22.12.12140.3
Description
The issue allows rendering of HTML provided by another authenticated user in the browser, which can lead to the theft of user sensitive information.
Recommendations
For M-Files Web versions prior to 22.12.12140.3, update to version 22.12.12140.3 or later.
For M-Files New Web versions prior to 22.12.12140.3, update to version 22.12.12140.3 or later.
Fix
Information Disclosure
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
M-Files New Web
M-Files Web