CVE-2023-51748

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode.

• CWE-693

• https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
• https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6Exploit, Third Party Advisory
• https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59Exploit, Third Party Advisory
• https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
• https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6Exploit, Third Party Advisory
• https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59Exploit, Third Party Advisory

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-51742This vulnerability exist in Skyworth Router CM5100, version …7.5
• CVE-2023-51743This vulnerability exist in Skyworth Router CM5100, version …7.5
• CVE-2023-51744A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2023-51745A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2023-51746A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2023-51747Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable…7.1
• CVE-2023-51749ScaleFusion 10.5.2 does not properly limit users to the Edge…8.8
• CVE-2023-5175During process shutdown, it was possible that an `ImageBitma…9.8
• CVE-2023-51750ScaleFusion 10.5.2 does not properly limit users to the Edge…4.6
• CVE-2023-51751ScaleFusion 10.5.2 does not properly limit users to the Edge…6.8
• CVE-2023-51753Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-51754Rejected reason: This is unused.