CVE-2023-5524: M-Files Web Companion

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types

Affected products

• M-Files Web Companion: before 23.8 (fixed in 23.8); from 23.3, before 23.10 (fixed in 23.10); version 23.8 only

Published 2023-10-20. Last modified 2026-06-17.