CVE-2023-51750

ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur. NOTE: the vendor's position is "Not vulnerable if the default Windows device profile configuration is used which utilizes modern management with website allow-listing rules."

• CWE-286

• https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agentVendor Advisory
• https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6Third Party Advisory
• https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59Third Party Advisory
• https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agentVendor Advisory
• https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6Third Party Advisory
• https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59Third Party Advisory

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-51745A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2023-51746A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2023-51747Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable…7.1
• CVE-2023-51748ScaleFusion 10.5.2 does not properly limit users to the Edge…8.8
• CVE-2023-51749ScaleFusion 10.5.2 does not properly limit users to the Edge…8.8
• CVE-2023-5175During process shutdown, it was possible that an `ImageBitma…9.8
• CVE-2023-51751ScaleFusion 10.5.2 does not properly limit users to the Edge…6.8
• CVE-2023-51753Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-51754Rejected reason: This is unused.
• CVE-2023-51755Rejected reason: This is unused.
• CVE-2023-51756Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-5176Memory safety bugs present in Firefox 117, Firefox ESR 115.2…9.8