CVE-2021-37253

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers)

published December 5, 2021

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers). NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02931 · 87.0th percentile
Published
2021-12-05T20:28Z
EPSS history
Timeline
  • 05 DEC 20:28Z
    M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers)
    cvelistv5