← Database

CVE-2021-41809

LOW CVSS: 3.5 Published: 2022-01-18 Modified: 2026-06-17

Description

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

Affected Platforms

M-Files M-Files Server

Weakness Type

CWE-918, CWE-918

References