CVE-2024-0563
Medium
Description
Denial of service condition in M-Files Server in versions before 24.2 (excluding 23.2 SR7 and 23.8 SR5) allows anonymous user to cause denial of service against other anonymous users.
SeverityMedium
CVSS4.3
Exploit probability—
ProductM-files Server
PublishedFeb 23, 2024
First seenFeb 23, 2024
Weakness typeCWE-770Allocation of resources without limits
How to fix
Update
- m-files m-files_server23.2.12340.6, 23.8.12892.6, 23.8.12892.17, 24.2.13421.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| m-files m-files_server | v < 23.2.12340.6, 23.2.12340.6 < v < 23.8.12892.6, 23.2.12340.6 ≤ v < 23.8.12892.17, 23.8.12892.6 < v < 24.2.13421.8 | 23.2.12340.6, 23.8.12892.6, 23.8.12892.17, 24.2.13421.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.