Security Advisory

CVE-2023-6910

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-20 09:36:39
Last updated 2026-02-23 09:00:05
Assigner M-Files Corporation
State PUBLISHED

Description

A vulnerable API method in M-Files Server before 23.12.13195.0 allows for uncontrolled resource consumption. Authenticated attacker can exhaust server storage space to a point where the server can no longer serve requests.