CVE-2023-0382: Uncontrolled Resource Consumption in M-Files Server

DESCRIPTION

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption.

AFFECTED PRODUCTS

M-Files Server before 23.4.12528.1

MORE INFORMATION

Due to no limit users can force MFServer to reserve huge amount of memory during file download.

CVSS 3.1 Score: 6.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-770 Allocation of Resources Without Limits or Throttling

CAPEC: CAPEC-130 Excessive Allocation

Internal ID: 166225

Date issued: 2023-04-05

LINKS

https://www.cve.org/CVERecord?id=CVE-2023-0382

HISTORY

2023-04-05 Published
2024-08-28 CWE Updated