CVE-2023-5524 Information

Description

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows

Remote Code Execution

via specific file types

Reference

https://www.m-files.com/about/trust-center/security-advisories/cve-2023-5524/