← Database

CVE-2021-41807

HIGH CVSS: 7.5 Published: 2022-01-18 Modified: 2026-06-17

Description

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.

Affected Platforms

M-Files M-Files ServerM-Files M-Files Web

Weakness Type

CWE-307, CWE-307

References