Medium · 6.5 CVE-2022-4264 EUVD-2022-51620GHSA-j86w-j9vr-w3pm

Incorrect privilege assignment in M-Files Web Server

Published Dec 9, 2022 · Updated Feb 23, 2026 · Assigned by M-Files Corporation

Description

Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to change some configuration.

Vendor	Product	Affected	Fixed
M-Files	M-Files Web	< 22.8.11691.0	22.8.11691.0