CVEDB API

A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 16.0%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2025-5964

M-Files » M-Files Server » Version: N/A

cpe:2.3:a:m-files:m-files_server:-
M-Files » M-Files Server » Version: 23.2.12340.6

cpe:2.3:a:m-files:m-files_server:23.2.12340.6
M-Files » M-Files Server » Version: 23.8.12892.17

cpe:2.3:a:m-files:m-files_server:23.8.12892.17
M-Files » M-Files Server » Version: 23.8.12892.23

cpe:2.3:a:m-files:m-files_server:23.8.12892.23
M-Files » M-Files Server » Version: 24.2.13421.15

cpe:2.3:a:m-files:m-files_server:24.2.13421.15
M-Files » M-Files Server » Version: 24.8.13981.13

cpe:2.3:a:m-files:m-files_server:24.8.13981.13
M-Files » M-Files Server » Version: 24.8.13981.14

cpe:2.3:a:m-files:m-files_server:24.8.13981.14
M-Files » M-Files Server » Version: 25.2.14524.3

cpe:2.3:a:m-files:m-files_server:25.2.14524.3
M-Files » M-Files Server » Version: 25.3.14681.7

cpe:2.3:a:m-files:m-files_server:25.3.14681.7