335 matches found
PT-2023-32573 · M Files · M-Files Server
Name of the Vulnerable Software and Affected Versions: M-Files Server versions 23.9 through 23.11 before 23.11.13168.7 Description: The issue arises under rare conditions when an object in M-Files Server has a specific configuration of metadata-driven permissions, potentially leading to incorrect...
M-Files Server Security Vulnerability
M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in versions prior to M-Files Server 23.11.13168.7 that stems from an incorrectly computed valid privilege that may produce incorrect results if metadata-driven permissions are used in a particular...
CVE-2023-6189
Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...
CVE-2023-6117
A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...
CVE-2023-6117
A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...
CVE-2023-6117
A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...
CVE-2023-6189
Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...
Design/Logic Flaw
A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...
CVE-2023-6189 Improper Permission Handling in M-Files Server
Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...
CVE-2023-6117
CVE-2023-6117 affects M-Files server REST API: obsolete REST API functionalities can be exploited to cause memory consumption leading to Denial of Service. Affected versions are prior to 23.11.13156.0. Exploit details are not disclosed in the provided docs beyond the DoS impact. Mitigation: upgra...
M-Files Security Vulnerability
M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files server versions prior to 23.11.13156.0, which stems from a security flaw in the Rest API method. An attacker could exploit this vulnerability to conduct a denial of...
CVE-2023-6117: Allocation of Resources Without Limits or Throttling
A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...
PT-2023-32525 · M Files · M-Files Server
Name of the Vulnerable Software and Affected Versions: M-Files server versions prior to 23.11.13156.0 Description: A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server, which allows attackers to execute...
CVE-2023-3425
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...
CVE-2023-3425
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...
CVE-2023-3425
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...
Design/Logic Flaw
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...
CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...
CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...