CVE-2022-4264

概要

参考情報

• empower.m-files.com/security-advisories/CVE-2022-4264
• product.m-files.com/security-advisories/cve-2022-4264
• m-files.com/about/trust-center/security-advisories/cve-2022-4264 · Broken Link

m-files のその他の脆弱性

• CVE-2023-4479中 5.4Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document wit…
• CVE-2023-2480高 7.8Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI …
• CVE-2023-0213高 7.8Elevation of privilege issue in M-Files Installer versions before 22.6 on Windows allows user to gain SYSTEM privileges via DLL hijacking.