CVE-2023-3425

CVE-2023-3425: Out-of-Bounds memory read

State: Published
Severity: 6.5 Medium
Published: Aug 25, 2023
Updated: Feb 23, 2026
Reserved: Jun 27, 2023

Description

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H	M-Files Corporation

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
M-Files ServerM-Files	before 23.8.12892.6Affected 23.2.12340.14Not affected

References

https://product.m-files.com/security-advisories/cve-2023-3425/vendor-advisory
https://empower.m-files.com/security-advisories/CVE-2023-3425vendor-advisory
https://www.m-files.com/about/trust-center/security-advisories/cve-2023-3425

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.