M-Files Classic Web Stored XSS Vulnerability (CVE-2023-2325)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2023-2325 2. Vulnerability Name: Stored XSS Vulnerability in M-Files Classic Web 3. Affected Products: - M-Files Server before 23.10 - M-Files Server before 23.2 LTS SR4 (this service release is not affected) - M-Files Server before 23.8 LTS SR1 (this service release is not affected) 4. Description: In M-Files Classic Web versions prior to 23.10 and LTS service releases prior to 23.2 LTS SR4 and 23.8 LTS SR1, attackers can execute scripts in users' browsers by storing malicious HTML documents. 5. Additional Information: - Exploiting this vulnerability requires access to an M-Files Vault to store malicious HTML files, and users must open the document via a specific link, such as one sent via email. - Opening files normally through M-Files Web from the Vault does not trigger this vulnerability. - CVSS 3.1 Base Score: 7.3 - CVSS 3.1 Temporal Score: 6.6 - CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R - CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - CAPEC: CAPEC-592 Stored XSS - Internal ID: 167253 - Publication Date: 2023-10-19 - Credit: (Finders) Thomas Riedmaier / Siemens Energy, Abian Blome / Siemens Energy 6. Exploitability: - Public Disclosure: No – Responsible Disclosure - Exploit Available: No - Exploit Likelihood: Low – Responsible Disclosure 7. Links: - Detailed information for CVE-2023-2325: https://www.cve.org/CVERecord?id=CVE-2023-2325 8. History: - Publication Date: 2023-10-20

Goal Reached Thanks to every supporter — we hit 100%!

M-Files Classic Web Stored XSS Vulnerability (CVE-2023-2325)