Description (CNA)
A vulnerable API method in M-Files Server before 23.12.13195.0 allows for uncontrolled resource consumption. Authenticated attacker can exhaust server storage space to a point where the server can no longer serve requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| M-Files Corporation / M-Files Server | affected 0 before 23.12.13195.0; unaffected 23.8 LTS SR4; unaffected 23.2 LTS SR6 |
CWE
CWE-770
References
- https://product.m-files.com/security-advisories/cve-2023-6910/
- https://empower.m-files.com/security-advisories/CVE-2023-6910
ADP enrichment
No English description supplied.