Security Advisory

CVE-2021-41809

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-18 16:51:49
Last updated 2026-02-23 07:50:32
Assigner M-Files Corporation
State PUBLISHED

Description

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.