CVE-2023-0383: Uncontrolled Resource Consumption in M-Files Server

DESCRIPTION

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption.

AFFECTED PRODUCTS

M-Files Server before 23.4.12528.1

MORE INFORMATION

Due to no limit anonymous users can force MFServer to reserve huge amount of memory during file download.

CVSS 3.1 Score: 7.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-770 Allocation of Resources Without Limits or Throttling

CAPEC: CAPEC-130 Excessive Allocation

Internal ID: 166257

Date issued: 2023-04-20

LINKS

https://www.cve.org/CVERecord?id=CVE-2023-0383

HISTORY

2023-04-20 Published
2024-08-28 CWE Updated