Back to search
CVE-2024-10126
Published: Nov 20, 2024
Modified: Feb 23, 2026
PUBLISHED
Description
Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7) allows an authenticated user to read server local files of a limited set of filetypes via document preview.
| Vendor | Product | Versions |
|---|---|---|
M-Files Corporation" | M-Files Server | affected 0 - < 24.11unaffected 23.8 SR7unaffected 24.2 SR3unaffected 24.8 SR1 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now