← Database

CVE-2024-6789

MEDIUM CVSS: 6.5 Published: 2024-08-27 Modified: 2026-06-17

Description

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files

Affected Platforms

M-Files M-Files Server

Weakness Type

CWE-22, CWE-22

References