DESCRIPTION:

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonymous user to cause denial of service

AFFECTED PRODUCTS:

M-Files Server before 23.6.12695.3 (excluding 23.2 SR2 and newer)

MORE INFORMATION:

Unchecked parameter value can cause uncaught exception and then crash M-Files Server causing denial of service condition.

CVSS 3.1 Score: 7.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-248 Uncaught Exception

CAPEC: CAPEC-129 Pointer Manipulation

Internal ID: 167238

Date issued: 2023-06-28

LINKS

https://www.cve.org/CVERecord?id=CVE-2023-3405

HISTORY

2023-06-28 Published