High severity7.5NVD Advisory· Published Oct 28, 2021· Updated Jun 17, 2026

CVE-2021-37254

Description

In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party component license key information on server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

M-Files/M-Files Webdescription
M Files Corporation"/M-Files Webllm-create
Range: <20.10.9524.1, <20.10.9445.0

Patches

Vulnerability mechanics

References

www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-37254/nvdVendor Advisory
www.m-files.com/company/trust-center/vulnerability-disclosure/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000