VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 18, 2022· Updated Jun 17, 2026

CVE-2021-41807

CVE-2021-41807

Description

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • M Files Corporation"/M-Files Server3 versions
    cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*range: <21.12.10873.0
    • (no CPE)range: <21.12.10873.0
    • (no CPE)range: Online
  • M Files Corporation"/M Files Web3 versions
    cpe:2.3:a:m-files:m-files_web:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:m-files:m-files_web:*:*:*:*:*:*:*:*range: <21.12.10873.0
    • (no CPE)range: <21.12.10873.0
    • (no CPE)range: Classic

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.