CVE-2023-51750

MEDIUM 4.6CVE-2023-51750 · Published 11/01/2024 · updated 17/06/2026

In short

CVE-2023-51750 is a MEDIUM (CVSS 4.6) vulnerability affecting scalefusion (scalefusion).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
scalefusion scalefusion	`= 10.5.2`	No fix yet

Description

ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur. NOTE: the vendor's position is "Not vulnerable if the default Windows device profile configuration is used which utilizes modern management with website allow-listing rules."

References

help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent · Vendor Advisory
medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6 · Third Party Advisory
medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59 · Third Party Advisory

More vulnerabilities in scalefusion

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

scalefusion

= 10.5.2

No fix yet

More vulnerabilities in scalefusion

See all →