| Package | Affected versions | Patched versions |
|---|---|---|
| m-files server | < 21.12.10873.0 | 21.12.10873.0 |
| m-files web | < 21.12.10873.0 | 21.12.10873.0 |
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free