CVE-2021-41809: M-Files Server

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

Affected products

• M-Files M-Files Server: before 22.1.11017.1 (fixed in 22.1.11017.1)

Published 2022-01-18. Last modified 2026-06-17.