CVE-2023-6117: M-Files Server

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks.

Affected products

• M-Files M-Files Server: up to and including 23.11.13156.0

Published 2023-11-22. Last modified 2026-06-17.