MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.

Published Jan 14, 2025 · Updated Jan 31, 2025 · Assigned by mitre