← Database

CVE-2022-3284

MEDIUM CVSS: 6.5 Published: 2023-03-06 Modified: 2026-06-17

Description

Download key for a file in a vault was passed in an insecure way that could easily be logged in M-Files New Web in M-Files before 22.11.12011.0. This issue affects M-Files New Web: before 22.11.12011.0.

Affected Platforms

M-Files M-Files Server

Weakness Type

CWE-200, NVD-CWE-noinfo

References