M-Files New Web vulnerabilities

2 known vulnerabilities in M-Files New Web from M-Files. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  M-Files New Web: Improper Neutralization of Input During Web Page Generation

  CVE-2022-4862Mar 6, 2023M-Files

  Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sensitive information. This issue affects M-Files New Web: before 22.12.12140.3.

• 7.5 High severity

  M-Files New Web: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-3284Mar 6, 2023M-Files

  Download key for a file in a vault was passed in an insecure way that could easily be logged in M-Files New Web in M-Files before 22.11.12011.0. This issue affects M-Files New Web: before 22.11.12011.0.