WEB Companion

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-20	CVE-2023-5523	Inclusion of Functionality from Untrusted Control Sphere vulnerability in M-Files web Companion 23.8 Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution local low complexity m-files CWE-829	7.8
2023-10-20	CVE-2023-5524	Unrestricted Upload of File with Dangerous Type vulnerability in M-Files web Companion 23.8 Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types local low complexity m-files CWE-434	7.3