<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: m-files-server</title><description>Every new CVE for m-files-server.</description><link>https://agentprime.io/</link><item><title>CVE-2023-6239: Incorrect calculation of effective permissions</title><link>https://agentprime.io/advisories/CVE-2023-6239/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6239/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Nov 2023 14:07:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6189: Improper Permission Handling in M-Files Server</title><link>https://agentprime.io/advisories/CVE-2023-6189/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6189/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Nov 2023 09:56:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6117: M-Files REST API allows Denial of Service</title><link>https://agentprime.io/advisories/CVE-2023-6117/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6117/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Nov 2023 09:56:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3425: CVE-2023-3425: Out-of-Bounds memory read</title><link>https://agentprime.io/advisories/CVE-2023-3425/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3425/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Aug 2023 08:08:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3405: Denial of service condition in M-Files Server</title><link>https://agentprime.io/advisories/CVE-2023-3405/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3405/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Jun 2023 14:24:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0384: Uncontrolled Resource Consuption in M-Files Server</title><link>https://agentprime.io/advisories/CVE-2023-0384/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0384/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Apr 2023 08:02:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0383: Uncontrolled Resource Consuption in M-Files Server</title><link>https://agentprime.io/advisories/CVE-2023-0383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0383/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Apr 2023 08:00:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0382: Uncontrolled Resource Consumption in M-Files Server</title><link>https://agentprime.io/advisories/CVE-2023-0382/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0382/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Apr 2023 06:13:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-4858: Insertion of Sensitive Information into Log File</title><link>https://agentprime.io/advisories/CVE-2022-4858/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-4858/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Dec 2022 11:24:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1911: Information disclosure in M-Files Server</title><link>https://agentprime.io/advisories/CVE-2022-1911/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1911/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Nov 2022 14:35:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1606: Incorrect privilege assignment in M-Files Server</title><link>https://agentprime.io/advisories/CVE-2022-1606/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1606/</guid><description>CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Nov 2022 14:05:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41808: In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.</title><link>https://agentprime.io/advisories/CVE-2021-41808/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41808/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jan 2022 16:51:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41807: Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.</title><link>https://agentprime.io/advisories/CVE-2021-41807/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41807/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jan 2022 16:51:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41809: SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.</title><link>https://agentprime.io/advisories/CVE-2021-41809/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41809/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jan 2022 16:51:49 GMT</pubDate><category>CVE</category></item></channel></rss>