CVE-2023-6910

Publication date

2023-12-20 09:36:39

Family

M-Files Corporation

State

PUBLISHED

Description

A vulnerable API method in M-Files Server before 23.12.13195.0 allows for uncontrolled resource consumption. Authenticated attacker can exhaust server storage space to a point where the server can no longer serve requests.