High · 7.5 CVE-2023-3405 EUVD-2023-44072GHSA-g4w4-pwm7-7rv4

Denial of service condition in M-Files Server

Published Jun 27, 2023 · Updated Feb 23, 2026 · Assigned by M-Files Corporation

Description

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonymous user to cause denial of service

Affected products

Vendor	Product	Affected	Fixed
M-Files	M-Files Server	< 23.6.12695.3	23.6.12695.3

References

https://product.m-files.com/security-advisories/cve-2023-3405/ vendor-advisory
https://empower.m-files.com/security-advisories/CVE-2023-3405 vendor-advisory