CVE-2024-9333 – Permission bypass in M-Files Connector for Copilot

https://notcve.org/view.php?id=CVE-2024-9333

02 Oct 2024 — Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation • https://product.m-files.com/security-advisories/cve-2024-9333 • CWE-281: Improper Preservation of Permissions •