Stored XSS Vulnerability in M-Files Web

CVE-2023-4479

What is CVE-2023-4479?

The vulnerability enables attackers to exploit the M-Files Web application through a stored cross-site scripting (XSS) flaw. This can result in the execution of arbitrary scripts in the browsers of users who access the compromised HTML documents. The potential exploit allows for unauthorized actions and data exposure, emphasizing the need for immediate updates to versions before 23.8. Users are urged to apply the latest security patches provided by M-Files to mitigate this risk.

References