high7.5
CVE-2023-2480
Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applicati…
Impact
Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| M-Files | M-Files | before 23.5.12598.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://empower.m-files.com/security-advisories/CVE-2023-2480
- https://product.m-files.com/security-advisories/cve-2023-2480/
- https://www.m-files.com/about/trust-center/security-advisories/cve-2023-2480/
- https://https://www.m-files.com/about/trust-center/security-advisories/cve-2023-2480/