← Database

CVE-2023-2480

HIGH CVSS: 7.5 Published: 2023-05-25 Modified: 2026-06-17

Description

Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications

Affected Platforms

M-Files M-Files

Weakness Type

CWE-280, CWE-862

References