User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption.
M-Files Server before 23.4.12528.1
Due to no limit users can force MFServer to reserve huge amount of memory during file download for a scheduled job.
CVSS 3.1 Score: 6.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-400 Uncontrolled Resource Consumption
CAPEC: CAPEC-130 Excessive Allocation
Internal ID: 166225
Date issued: 2023-04-20