Vulnerability in M-Files Corporation Connector For Copilot
CVE-2024-9333
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation
EPSS: 0.004 (34.2th percentile) — read the EPSS interpretation.
Affected products
- M-files Corporation Connector For Copilot — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@m-files.com (vendor-advisory)
- security@m-files.com (vendor-advisory)
Frequently asked questions
- What is CVE-2024-9333?
- CVE-2024-9333 is a vulnerability in M-Files Corporation Connector For Copilot, classified under Improper Preservation of Permissions. Published 2024-10-02.
- Is CVE-2024-9333 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.