VulnerabilityModified

CVE-2021-41809

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

MEDIUM 4.3EPSS 0.56%

Does this matter?

Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.56% probability · 45th percentile
CISA KEV: Not listed
Weakness: CWE-918
Affected: m-files/m-files server
Source: security@m-files.com

References

https://empower.m-files.com/security-advisories/CVE-2021-41809
https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/Vendor Advisory
https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41809/Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.