PT-2024-28921 · M Files · M-Files Server
CVE-2024-4056
·
Published
2024-04-26
·
Updated
2026-02-23
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
M-Files Server versions prior to 24.4.13592.4
M-Files Server versions after 23.11 (excluding 24.2 LTS)
Description
A denial of service condition in M-Files Server allows an unauthenticated user to consume computing resources.
Recommendations
For M-Files Server versions prior to 24.4.13592.4, update to version 24.4.13592.4 or later.
For M-Files Server versions after 23.11 (excluding 24.2 LTS), update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the server to minimize the risk of exploitation.
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
M-Files Server