VULNERABILITY INTELLIGENCE

CVE-2024-9333

EPSS probability0.42%
CISA KEVNot currently listed
Published2024-10-02
Last modified2026-06-17

Description

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation

Weakness classification

  • security@m-files.com: CWE-281

Primary references