CVE-2024-0563: M-Files Server

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Denial of service condition in M-Files Server in versions before 24.2 (excluding 23.2 SR7 and 23.8 SR5) allows anonymous user to cause denial of service against other anonymous users.

Affected products

• M-Files M-Files Server: before 23.2.12340.6 (fixed in 23.2.12340.6); after 23.2.12340.6, before 23.8.12892.6 (fixed in 23.8.12892.6); from 23.2.12340.6, before 23.8.12892.17 (fixed in 23.8.12892.17); after 23.8.12892.6, before 24.2.13421.8 (fixed in 24.2.13421.8)

Published 2024-02-23. Last modified 2026-06-17.