CVE-2023-6910

Katalog CVE

CVSS 6.5 · Medium EPSS 0,91%

Kerentanan Allocation of Resources Without Limits or Throttling pada m-files server. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerable API method in M-Files Server before 23.12.13195.0 allows for uncontrolled resource consumption. Authenticated attacker can exhaust server storage space to a point where the server can no longer serve requests.

Rincian

Terbit di NVD

20 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,91% peluang dieksploitasi; lebih tinggi dari 58,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://empower.m-files.com/security-advisories/CVE-2023-6910
• https://product.m-files.com/security-advisories/cve-2023-6910/
• https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6910