PT-2022-26509 · M Files · M-Files Web

Published 2022-12-02 · Updated 2026-02-23 · CVE-2022-4270

Positive Technologies (AI Summary)

CVSS v3.1

2.6

Low

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions M-Files Web versions before 22.5.11436.1

Description The issue is related to an incorrect privilege assignment in M-Files Web, which could have resulted in accidental changes to permissions.

Recommendations For M-Files Web versions before 22.5.11436.1, update to version 22.5.11436.1 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2022-4270

Affected Products

M-Files Web

References · 9

• https://m-files.com/about/trust-center/security-advisories/cve-2022-4270 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4270 · Security Note
• https://empower.m-files.com/security-advisories/CVE-2022-4270 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4270 · Vendor Advisory
• https://product.m-files.com/security-advisories/cve-2022-4270 · Vendor Advisory
• https://t.me/cveNotify/152824 · Telegram Post
• https://t.me/cvenotify/92462 · Telegram Post
• https://t.me/cibsecurity/53798 · Telegram Post
• https://t.me/cvenotify/38958 · Telegram Post