CVE-2021-41809CWE-918

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.

Low · published January 18, 2022

CVSS v3.1
3.5
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.6th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2022-01-18T16:51Z
EPSS history
Timeline
  • 18 JAN 16:51Z
    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.
    cvelistv5