Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wrw2-8vg5-g3jj

Опубликовано: 19 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

EPSS

Процентиль: 36%
0.00149
Низкий

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 3.5
nvd
около 4 лет назад

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

EPSS

Процентиль: 36%
0.00149
Низкий

Дефекты

CWE-918