CVE-2023-0383: Uncontrolled Resource Consumption in M-Files Server

DESCRIPTION:

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption.

AFFECTED PRODUCTS:

M-Files Server before 23.4.12528.1

MORE INFORMATION:

Due to no limit anonymous users can force MFServer to reserve huge amount of memory during file download.

CVSS 3.1 Score: 7.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-400 Uncontrolled Resource Consumption

CAPEC: CAPEC-130 Excessive Allocation

Internal ID: 166257

Date issued: 2023-04-20

LINKS

https://www.cve.org/CVERecord?id=CVE-2023-0383

HISTORY

2023-04-20 Published