CVE-2021-41808: M-Files Server

Low severity, CVSS 2.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

Affected products

• M-Files M-Files Server: before 21.11.10775.0 (fixed in 21.11.10775.0)

Published 2022-01-18. Last modified 2026-06-17.