CVE-2021-41810: Script injection in M-Files Admin
Published May 2, 2022
·Updated
Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable
Affected Software
1 affected component
M-Files Server<22.2.11051.0
Event History
May 2, 2022
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-41810?
CVE-2021-41810 is a vulnerability that allows the storing of configuration data with a script which may then be executed by another vault administrator.
2
How severe is CVE-2021-41810?
CVE-2021-41810 has a severity rating of medium with a score of 4.8.
3
Is CVE-2021-41810 remotely exploitable?
No, CVE-2021-41810 is not remotely exploitable.
4
What software versions are affected by CVE-2021-41810?
M-files Server versions up to and excluding 22.2.11051.0 are affected by CVE-2021-41810.
5
How can I fix CVE-2021-41810?
To fix CVE-2021-41810, it is recommended to update M-files Server to a version beyond 22.2.11051.0.