Medium severity · published Oct 2, 2024
CVE-2024-9333
Permission bypass in M-Files Connector for Copilot
5.3
CVSS
0.4%
EPSS
No
On KEV
Description
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
M-Files Connector for Copilot · M-Files Corporation
before 24.9.3 · source: vendor
Affected product
MC
M-Files Connector for Copilot
M-Files Corporation