CVE-2021-41809

Publication date

2022-01-18 16:51:49

Family

M-Files Corporation

State

PUBLISHED

Description

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.