CVE-2024-0563: Denial of service condition in M-Files Server in versions before 24.2 (excluding 23.2 SR7 and 23.8 SR5) allows anonymous user to cause denial of service…

PriorityP429medium6.5CVSS 3.1

AVNACLPRLUINSUCNINAH

EPSS

0.71%

48.7th percentile

Denial of service condition in M-Files Server in versions before 24.2 (excluding 23.2 SR7 and 23.8 SR5) allows anonymous user to cause denial of service against other anonymous users.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
m-files	m-files_server	< 23.2.12340.6	23.2.12340.6
m-files	m-files_server	< 23.8.12892.6	23.8.12892.6
m-files	m-files_server	< 24.2.13421.8	24.2.13421.8
m-files	m-files_server	>= 23.2.12340.6 < 23.8.12892.17	23.8.12892.17
m-files_corporation	m-files_server	< 24.2	24.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.