CVE-2023-5523: M-Files Web Companion

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution

Affected products

• M-Files Web Companion: before 23.8 (fixed in 23.8); from 23.3, before 23.10 (fixed in 23.10); version 23.8 only

Published 2023-10-20. Last modified 2026-06-17.