Back to Database
Status published
Medium
CVE-2023-6239
Incorrect calculation of effective permissions
Vulnerability Description
Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6239
Credits & Attribution
No credits recorded in the NVD database.
References
More from M-Files
View All →CVE-2023-6189
Improper Permission Handling in M-Files Server
Medium
4.3
CVE-2023-6117
M-Files REST API allows Denial of Service
Medium
5.7
CVE-2023-5524
M-Files Web Companion allows Remote Code Execution for some filetypes
High
8.2
CVE-2023-5523
M-Files Web Companion allows Remote Code Execution
High
8.6
CVE-2023-3425
CVE-2023-3425: Out-of-Bounds memory read
Medium
6.5
Affected Vendor
M-Files
View all reports →Affected Software
M-Files Server
Vulnerable Versions:
23.9, 23.10, 23.11
Timeline
Official Publish:
November 28th, 2023
Last Modified:
February 23rd, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.