TI-2023-00206 CVE-2023-0213 · GHSA-f75p-j579-8r2c
Local Elevation of Privilege in M-Files
Priority LOW 39
Elevation of privilege issue in M-Files Installer versions before 22.6 on Windows allows user to gain SYSTEM privileges via DLL hijacking.
M-Files Corporation
Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9
Exploited now
M-Files Corporation records in CISA KEVNo M-Files Corporation vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in M-files · all components
TI-2023-02329 CVE-2023-2480 · GHSA-xgf2-5w76-r5jg
Elevation of Privilege in M-Files Desktop Client
Priority LOW 35
Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications
TI-2023-04134 CVE-2023-4479 · GHSA-r32c-fmcr-34r3
Cross-site scripting in M-Files Web
Priority LOW 32
Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period.
TI-2022-03904 CVE-2022-4264 · GHSA-j86w-j9vr-w3pm
Incorrect privilege assignment in M-Files Web Server
Priority LOW 30
Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to change some configuration.