CVE-2023-2480

Summary

Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications

Affected Software

Weaknesses

• CWE-280: CWE-280 Improper Handling of Insufficient Permissions or Privileges

ADP Enrichment

CVE Program Container

Additional References

• https://https://www.m-files.com/about/trust-center/security-advisories/cve-2023-2480/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://product.m-files.com/security-advisories/cve-2023-2480/
• https://empower.m-files.com/security-advisories/CVE-2023-2480

• ←Previous
• Next→