<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: m-files-web</title><description>Every new CVE for m-files-web.</description><link>https://agentprime.io/</link><item><title>CVE-2023-2325: Stored XSS Vulnerability in M-Files Classic Web</title><link>https://agentprime.io/advisories/CVE-2023-2325/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-2325/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Oct 2023 06:39:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3406: Path traversal issue in M-Files Classic Web</title><link>https://agentprime.io/advisories/CVE-2023-3406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3406/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Aug 2023 08:11:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-4264: Incorrect privilege assignment in M-Files Web Server</title><link>https://agentprime.io/advisories/CVE-2022-4264/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-4264/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Dec 2022 14:08:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-4270: Incorrect privilege assignment in M-Files Web Server</title><link>https://agentprime.io/advisories/CVE-2022-4270/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-4270/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Dec 2022 12:20:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41807: Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.</title><link>https://agentprime.io/advisories/CVE-2021-41807/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41807/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jan 2022 16:51:50 GMT</pubDate><category>CVE</category></item></channel></rss>