CVE-2021-41809

Summary

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

Affected Software

Weaknesses

• CWE-918: CWE-918 Server-Side Request Forgery (SSRF)

ADP Enrichment

CVE Program Container

Additional References

• https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/

References

• https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/
• https://empower.m-files.com/security-advisories/CVE-2021-41809

• ←Previous
• Next→