PT-2023-19787 · M Files · M-Files Client
CVE-2023-2480
·
Publicado
2023-05-25
·
Atualizado
2024-08-28
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
M-Files Client versions prior to 23.5.12598.0
Description
The issue is related to missing access permissions checks in the M-Files Client, which allows elevation of privilege via UI extension applications.
Recommendations
For versions prior to 23.5.12598.0, update to version 23.5.12598.0 or later to resolve the issue.
Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
M-Files Client