573 matches found
M-Files Server 安全漏洞
M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server version 23.6.12695.3 and earlier, which stems from unchecked parameter values that allow anonymous users to cause a denial of service...
PT-2023-24656 · M Files · M-Files Server
Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.6.12695.3 Description: The issue is related to an unchecked parameter value in M-Files Server, which allows an anonymous user to cause a denial of service. Recommendations: For versions prior to 23.6.12695....
CVE-2023-2480
Missing access permissions checks in M-Files Client before 23.5.12598.0 excluding 23.2 SR2 and newer allows elevation of privilege via UI extension applications...
CVE-2023-2480
Missing access permissions checks in M-Files Client before 23.5.12598.0 excluding 23.2 SR2 and newer allows elevation of privilege via UI extension applications...
CVE-2023-2480
Missing access permissions checks in M-Files Client before 23.5.12598.0 excluding 23.2 SR2 and newer allows elevation of privilege via UI extension applications...
CVE-2023-2480 Elevation of Privilege in M-Files Desktop Client
Missing access permissions checks in M-Files Client before 23.5.12598.0 excluding 23.2 SR2 and newer allows elevation of privilege via UI extension applications...
CVE-2023-2480 Elevation of Privilege in M-Files Desktop Client
Missing access permissions checks in M-Files Client before 23.5.12598.0 excluding 23.2 SR2 and newer allows elevation of privilege via UI extension applications...
CVE-2023-2480
CVE-2023-2480 affects M-Files Client prior to 23.5.12598.0 (excluding 23.2 SR2 and newer). The root cause is missing access permission checks, enabling elevation of privilege via UI extension applications. Impact is practical privilege escalation. Remediation: upgrade to 23.5.12598.0 or later. Ot...
M-Files 安全漏洞
M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files Client prior to version 23.5.12598.0, which stems from a lack of access rights checking that allows elevation of privileges via UI application extensions...
PT-2023-19787 · M Files · M-Files Client
Name of the Vulnerable Software and Affected Versions: M-Files Client versions prior to 23.5.12598.0 Description: The issue is related to missing access permissions checks in the M-Files Client, which allows elevation of privilege via UI extension applications. Recommendations: For versions prior...
M-Files Resource Management Error Vulnerability
M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A resource management error vulnerability exists in versions prior to M-Files 23.4.12528.1 that stems from uncontrolled memory consumption of scheduled jobs, which can be exploited by an attacker to cause a...
CVE-2023-2112
Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...
CVE-2023-2112
Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...
CVE-2023-0384
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...
CVE-2023-0383
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...
CVE-2023-0383
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...
CVE-2023-0383
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...
CVE-2023-0384
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...
