CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6910

A vulnerable API method in M-Files Server before 23.12.13195.0 allows for uncontrolled resource consumption. Authenticated attacker can exhaust server storage space to a point where the server can no longer serve requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.7%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2023-6910

M-Files » M-Files Server » Version: N/A

cpe:2.3:a:m-files:m-files_server:-
M-Files » M-Files Server » Version: 22.11.12011.0

cpe:2.3:a:m-files:m-files_server:22.11.12011.0
M-Files » M-Files Server » Version: 22.12.12140.3

cpe:2.3:a:m-files:m-files_server:22.12.12140.3
M-Files » M-Files Server » Version: 22.2.11051.0

cpe:2.3:a:m-files:m-files_server:22.2.11051.0
M-Files » M-Files Server » Version: 22.3.11237.3

cpe:2.3:a:m-files:m-files_server:22.3.11237.3
M-Files » M-Files Server » Version: 22.6.11534.4

cpe:2.3:a:m-files:m-files_server:22.6.11534.4
M-Files » M-Files Server » Version: 23.4.12455.0

cpe:2.3:a:m-files:m-files_server:23.4.12455.0
M-Files » M-Files Server » Version: 23.4.12528.1

cpe:2.3:a:m-files:m-files_server:23.4.12528.1
M-Files » M-Files Server » Version: 23.6.12695.3

cpe:2.3:a:m-files:m-files_server:23.6.12695.3
M-Files » M-Files Server » Version: 23.9

cpe:2.3:a:m-files:m-files_server:23.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6910

Products

Pricing

Contact Us