653 matches found
CVE-2024-10127: Incorrect Implementation of Authentication Algorithm
Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication without a password when the LDAP server itself had the vulnerable configuration...
PT-2024-16048
Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 24.11 Description A Local File Inclusion issue allows an authenticated user to read server local files of a limited set of filetypes via document preview. Recommendations For versions prior to 24.11, update to...
CVE-2024-9333
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9333
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9174
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
CVE-2024-9174
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
CVE-2024-9333
CVE-2024-9333 involves M-Files Connector for Copilot prior to version 24.9.3 where an incorrect access control list calculation allows an authenticated user to bypass permissions and access a limited set of documents. The issue is tied to the access control mechanism in the connector, with impact...
CVE-2024-9333 Permission bypass in M-Files Connector for Copilot
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9333 Permission bypass in M-Files Connector for Copilot
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9174 Stored HTML Injection in Hubshare social module
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
CVE-2024-9174
CVE-2024-9174 affects M-Files Hubshare (Social Module) prior to version 5.0.8.6. It is a stored HTML injection vulnerability that allows an authenticated user to spoof the UI. Root cause: HTML injection in the Social Module; impact includes UI spoofing. The PT-Security advisory corroborates the a...
CVE-2024-9174 Stored HTML Injection in Hubshare social module
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
M-Files Connector 安全漏洞
M-Files Connector is an M-Files connector for network folders from M-Files, Inc. A security vulnerability exists in M-Files Connector for Copilot versions prior to 24.9.3 that stems from an access control error...
M-Files Hubshare 安全漏洞
M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 5.0.8.6 that stems from the presence of an HTML injection vulnerability...
CVE-2024-9333: Improper Preservation of Permissions
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9174: Improper Neutralization of Input During Web Page Generation
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
PT-2024-39579
Name of the Vulnerable Software and Affected Versions M-Files Connector for Copilot versions prior to 24.9.3 Description The issue allows an authenticated user to bypass permissions and access a limited amount of documents due to an incorrect access control list calculation. Recommendations For...
PT-2024-39472
Name of the Vulnerable Software and Affected Versions M-Files Hubshare versions prior to 5.0.8.6 Description The issue allows an authenticated user to spoof the UI through stored HTML injection in the Social Module. Recommendations For versions prior to 5.0.8.6, update to version 5.0.8.6 or later...