Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2025/11/29 2:25 a.m.12 views

CVE-2025-53900 Kiteworks MFT has a Privilege Defined With Unsafe Actions

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on managing Connections could lead to unexpected escalation of privileges for authorized users. This issue has been patched in version 9.1.0...

6.5CVSS0.01017EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/29 2:25 a.m.14 views

CVE-2025-53900

Kiteworks MFT is affected by CVE-2025-53900 due to an improper definition of roles and permissions when managing Connections. Prior to version 9.1.0, this could allow an authorized user to escalate privileges within end-to-end file transfer workflows. The issue has been fixed in version 9.1.0. Af...

8.8CVSS6.7AI score0.01017EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/11/29 2:25 a.m.4 views

CVE-2025-53900 Kiteworks MFT has a Privilege Defined With Unsafe Actions

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on managing Connections could lead to unexpected escalation of privileges for authorized users. This issue has been patched in version 9.1.0...

6.5CVSS5.7AI score0.01017EPSS
SaveExploits0References3
Rows per page
Query Builder