Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2021-41809

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.

Description

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

M-Files M-Files Server

Default version status: unaffected

  • Online to < 22.1.11017.1affected

References