high7.5
CVE-2021-41807
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of…
Impact
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| M-Files | M-Files Server | before 21.12.10873.0 |
| M-Files | M-Files Web | before 21.12.10873.0 |