CVE-2021-37253: High severity m-files vulnerability
DISPUTED M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers). NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37253?
CVE-2021-37253 is a vulnerability in M-Files Web before 20.10.9524.1 that allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers.
What is the severity of CVE-2021-37253?
CVE-2021-37253 has a high severity with a CVSS score of 7.5.
How does CVE-2021-37253 affect M-Files Web?
CVE-2021-37253 affects M-Files Web versions up to and excluding 20.10.9524.1.
How can the denial of service vulnerability in M-Files Web be exploited?
The vulnerability can be exploited by sending HTTP requests with crafted Range or Request-Range headers containing overlapping ranges.
Is there a fix for CVE-2021-37253?
It is recommended to update M-Files Web to version 20.10.9524.1 or later to address the denial of service vulnerability.