CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode.

• CWE-284

• https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agentVendor Advisory
• https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6Third Party Advisory
• https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59Third Party Advisory
• https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agentVendor Advisory
• https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6Third Party Advisory
• https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59Third Party Advisory

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-51746A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2023-51747Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable…7.1
• CVE-2023-51748ScaleFusion 10.5.2 does not properly limit users to the Edge…8.8
• CVE-2023-51749ScaleFusion 10.5.2 does not properly limit users to the Edge…8.8
• CVE-2023-5175During process shutdown, it was possible that an `ImageBitma…9.8
• CVE-2023-51750ScaleFusion 10.5.2 does not properly limit users to the Edge…4.6
• CVE-2023-51753Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-51754Rejected reason: This is unused.
• CVE-2023-51755Rejected reason: This is unused.
• CVE-2023-51756Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-5176Memory safety bugs present in Firefox 117, Firefox ESR 115.2…9.8
• CVE-2023-51761In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products…8.1