PT-2022-26503 · M Files · My Files

CVE-2022-4264

Published

2022-12-09

Updated

2026-02-23

CVSS v3.1

6.5

Medium

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions M-Files versions prior to 22.8.11691.0

Description The issue allows a low privilege user to change some configuration due to incorrect privilege assignment in M-Files Web (Classic).

Recommendations For versions prior to 22.8.11691.0, update to version 22.8.11691.0 or later to resolve the issue.

Fix

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2022-4264

My Files