What is CVE-2023-4479?

CVE-2023-4479 is a high-severity vulnerability in M-Files, classified under Cross-site Scripting. CVSS score: 7.3/10. Published 2024-03-04.

How severe is CVE-2023-4479?

High severity. CVSS v3 base score is 7.3 out of 10.

XSS in M-Files

CVE-2023-4479

Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2024-03-04 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N.

EPSS exploit prediction

EPSS: 0.004 (35.5th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 35th percentile — 35.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

M-Files
M-Files Corporation Web — versions 0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

product.m-files.com/security-advisories/cve-2023-4479/ (vendor-advisory, Vendor Advisory)
empower.m-files.com/security-advisories/CVE-2023-4479 (vendor-advisory)
af854a3a-2127-422b-91ae-364da2661108 (Vendor Advisory)

Frequently asked questions

What is CVE-2023-4479?: CVE-2023-4479 is a high-severity vulnerability in M-Files, classified under Cross-site Scripting. CVSS score: 7.3/10. Published 2024-03-04.
How severe is CVE-2023-4479?: High severity. CVSS v3 base score is 7.3 out of 10.