CVE-2021-41809 — SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.

CVE-2021-41809

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server. PUBLISHED

Description (CNA)

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

Affected (CNA)

Vendor / product	Versions
M-Files / M-Files Server	affected Online before 22.1.11017.1

CWE

CWE-918

References

https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/
https://empower.m-files.com/security-advisories/CVE-2021-41809

ADP enrichment

CVE

No English description supplied.

https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/