CVE-2024-11176 Incorrect evaluation of effective permissions in M-Files Aino

Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access object information via incorrect evaluation of effective permissions...

CVE-2024-11176

The CVE-2024-11176 entry describes an improper access control vulnerability in M-Files Aino prior to version 24.10. An authenticated user could access object information due to an incorrect evaluation of effective permissions. Affected software: M-Files Aino; vulnerable component/behavior: evalua...

CVE-2024-11176 Incorrect evaluation of effective permissions in M-Files Aino

Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access object information via incorrect evaluation of effective permissions...

M-Files Aino 安全漏洞

M-Files Aino is a new AI assistant from M-Files that makes it easier for users to access the information they need to be productive. A security vulnerability exists in M-Files Aino versions prior to 24.10 that stems from improper access control...

M-Files Server 安全漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server that stems from the presence of a local file inclusion vulnerability that allows an authenticated attacker to read server local files of limited file types...

M-Files Server 安全漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server versions prior to 24.11 that stems from an authentication bypass condition in LDAP authentication, which allows users to authenticate without a password if the LDAP server itself...

PT-2024-16048 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 24.11 Description: A Local File Inclusion issue allows an authenticated user to read server local files of a limited set of filetypes via document preview. Recommendations: For versions prior to 24.11, update ...

CVE-2024-9333

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

CVE-2024-9333

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

CVE-2024-9174

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

CVE-2024-9174

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

CVE-2024-9333 Permission bypass in M-Files Connector for Copilot

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

CVE-2024-9333

CVE-2024-9333 involves M-Files Connector for Copilot prior to version 24.9.3 where an incorrect access control list calculation allows an authenticated user to bypass permissions and access a limited set of documents. The issue is tied to the access control mechanism in the connector, with impact...

CVE-2024-9333 Permission bypass in M-Files Connector for Copilot

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

CVE-2024-9174 Stored HTML Injection in Hubshare social module

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

CVE-2024-9174

CVE-2024-9174 affects M-Files Hubshare (Social Module) prior to version 5.0.8.6. It is a stored HTML injection vulnerability that allows an authenticated user to spoof the UI. Root cause: HTML injection in the Social Module; impact includes UI spoofing. The PT-Security advisory corroborates the a...

CVE-2024-9174 Stored HTML Injection in Hubshare social module

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

M-Files Connector 安全漏洞

M-Files Connector is an M-Files connector for network folders from M-Files, Inc. A security vulnerability exists in M-Files Connector for Copilot versions prior to 24.9.3 that stems from an access control error...

M-Files Hubshare 安全漏洞

M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 5.0.8.6 that stems from the presence of an HTML injection vulnerability...

PT-2024-39579 · M Files · M-Files Connector For Copilot

Name of the Vulnerable Software and Affected Versions: M-Files Connector for Copilot versions prior to 24.9.3 Description: The issue allows an authenticated user to bypass permissions and access a limited amount of documents due to an incorrect access control list calculation. Recommendations: Fo...