Local File Inclusion Vulnerability Affects M-Files Server
CVE-2024-10126

5.3MEDIUM

Key Information:

Vendor

M-files Corporation"

Status
M-files Server
Vendor
CVE Published:
20 November 2024

What is CVE-2024-10126?

Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7) allows an authenticated user to read server local files of a limited set of filetypes via document preview.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

M-Files Server Windows 0 < 24.11

M-Files Server Windows 23.8 SR7

M-Files Server Windows 24.2 SR3

References

https://product.m-files.com/security-advisories/CVE-2024-...
vendor-advisory
https://empower.m-files.com/security-advisories/CVE-2024-...
vendor-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nicolò Vinci
JSON
.