CVE-2023-6239

CVE-2023-6239 affects M-Files Server versions 23.9–23.11 before 23.11.13168.7. In rare configurations of metadata-driven permissions, the effective permissions of an object can be calculated incorrectly, potentially enabling unauthorized access to that object. Affected component is the permission...

CVE-2023-6239: Improper Preservation of Permissions

Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object...

PT-2023-32573 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions 23.9 through 23.11 before 23.11.13168.7 Description: The issue arises under rare conditions when an object in M-Files Server has a specific configuration of metadata-driven permissions, potentially leading to incorrect...

M-Files Server Security Vulnerability

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in versions prior to M-Files Server 23.11.13168.7 that stems from an incorrectly computed valid privilege that may produce incorrect results if metadata-driven permissions are used in a particular...

CVE-2023-6189

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...

CVE-2023-6189

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...

CVE-2023-6117

A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...

CVE-2023-6117

A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...

CVE-2023-6117

A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...

CVE-2023-6189

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...

Design/Logic Flaw

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...

Design/Logic Flaw

A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...

CVE-2023-6189 Improper Permission Handling in M-Files Server

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...

CVE-2023-6189

The CVE-2023-6189 entry concerns the M-Files server prior to version 23.11.13156.0, where a lack of proper access permissions checks allows an attacker to perform data write and export operations via the M-Files API. Affected component: M-Files server; root cause: missing access control on API me...

CVE-2023-6117 M-Files REST API allows Denial of Service

A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...

CVE-2023-6117

CVE-2023-6117 affects M-Files server REST API: obsolete REST API functionalities can be exploited to cause memory consumption leading to Denial of Service. Affected versions are prior to 23.11.13156.0. Exploit details are not disclosed in the provided docs beyond the DoS impact. Mitigation: upgra...

M-Files Security Vulnerability

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files server versions prior to 23.11.13156.0, which stems from a security flaw in the Rest API method. An attacker could exploit this vulnerability to conduct a denial of...

CVE-2023-6117: Allocation of Resources Without Limits or Throttling

A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks...

M-Files Security Vulnerability

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files server versions prior to 23.11.13156.0, which stems from a lack of access rights checking and allows an attacker to perform data writes and exports using the M-Files...

PT-2023-32525 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files server versions prior to 23.11.13156.0 Description: A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server, which allows attackers to execute...