CVE-2021-41810

MEDIUM 4.8CVE-2021-41810 · Published 02/05/2022 · updated 17/06/2026

In short

CVE-2021-41810 is a MEDIUM (CVSS 4.8) vulnerability affecting server (m-files).
Chance of exploitation in the next 30 days (EPSS): 0.71%, higher than 53.7% of all vulnerabilities.
Fix: update to 22.2.11051.0 or later.

Package	Affected versions	Patched versions
server m-files	`< 22.2.11051.0`	`22.2.11051.0`

Description

Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable

References

empower.m-files.com/security-advisories/CVE-2021-41810
product.m-files.com/security-advisories/cve-2021-41810
m-files.com/about/trust-center/security-advisories/cve-2021-41810 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free