Security Advisory

CVE-2025-5964

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-15 19:42:24

Last updated 2026-02-23 10:29:03

Assigner M-Files Corporation

State PUBLISHED

A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server.