CVE-2025-5964 | M-Files Server up to 25.3.14549 API Endpoint path traversal (EUVD-2025-18348)

June 16, 2025 Yanac

A vulnerability classified as critical was found in M-Files Server. Affected by this vulnerability is an unknown functionality of the component API Endpoint. The manipulation leads to path traversal.

This vulnerability is known as CVE-2025-5964. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More