CVE Database
/

CVE-2025-5964

Back to search

CVE-2025-5964

Published: Jun 15, 2025

Modified: Feb 23, 2026

PUBLISHED

Description

A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server.

VendorProductVersions

M-Files Corporation

M-Files Server

affected
0 - < 25.6.14925.0

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now