Local File Inclusion Vulnerability Affects M-Files Server
CVE-2024-10126

Currently unrated

Key Information:

Vendor: M-files Corporation"
Status: M-files Server
Vendor: CVE Published:; 20 November 2024

🔔 Create M-files Corporation" Vulnerability Alert

What is CVE-2024-10126?

Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7) allows an authenticated user to read server local files of a limited set of filetypes via document preview.

Affected Version(s)

M-Files Server Windows 0 < 24.11

M-Files Server Windows 23.8 SR7

M-Files Server Windows 24.2 SR3

References

https://product.m-files.com/security-advisories/CVE-2024-...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 20, 2024
Vulnerability Reserved
Oct 18, 2024

Credit

Nicolò Vinci