CVE-2023-3405: Denial of service condition in M-Files Server
Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonymous user to cause denial of service
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
M-Files Serverto a version that resolves this vulnerability.Fixed in 23.6.12695.3
Event History
Frequently Asked Questions
What is CVE-2023-3405?
CVE-2023-3405 is a vulnerability in M-Files Server that allows an anonymous user to cause a denial of service.
What is the severity of CVE-2023-3405?
The severity of CVE-2023-3405 is high, with a severity score of 7.5
Which versions of M-Files Server are affected by CVE-2023-3405?
Versions of M-Files Server before 23.6.12695.3 (excluding 23.2 SR2 and newer) are affected by CVE-2023-3405.
How can an anonymous user exploit CVE-2023-3405?
An anonymous user can exploit CVE-2023-3405 by providing an unchecked parameter value, leading to a denial of service.
Is there a fix available for CVE-2023-3405?
Yes, upgrading to version 23.6.12695.3 or newer of M-Files Server will fix the CVE-2023-3405 vulnerability.