CVE-2023-5524 (published 2023-10-20T06:41:56.499Z)
Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows 

Remote Code Execution

 via specific file types


Affected products: Vendor: M-Files
Product: Web Companion
Versions: 23.3, 23.8 LTS SR1