Vulnerability in M-Files Corporation Connector For Copilot
CVE-2024-9333
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (33.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 34th percentile — 33.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- M-Files Corporation Connector For Copilot — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- product.m-files.com/security-advisories/cve-2024-9333/ (vendor-advisory)
- empower.m-files.com/security-advisories/CVE-2024-9333 (vendor-advisory)
Frequently asked questions
- What is CVE-2024-9333?
- CVE-2024-9333 is a vulnerability in M-Files Corporation Connector For Copilot, classified under Improper Preservation of Permissions. Published 2024-10-02.
- Is CVE-2024-9333 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.