CVE-2023-6239

Publication date

2023-11-28 14:07:20

Family

M-Files Corporation

State

PUBLISHED

Description

Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.