medium6.5
CVE-2025-5964
A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server.
Impact
A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| M-Files | M-Files Server | before 24.8.13981.16 from 25.2.14524.3 before 25.2.14524.9 from 25.3.14681.7 before 25.6.14925.0 |