Security Advisory

CVE-2022-3284

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-03-06 10:39:43
Last updated 2026-02-23 07:58:28
Assigner M-Files Corporation
State PUBLISHED

Description

Download key for a file in a vault was passed in an insecure way that could easily be logged in M-Files New Web in M-Files before 22.11.12011.0. This issue affects M-Files New Web: before 22.11.12011.0.