← Database

CVE-2025-13008

N/A CVSS: N/A Published: 2025-12-19 Modified: 2026-06-17

Description

An information disclosure vulnerability in M-Files Server before versions 25.12.15491.7, 25.8 LTS SR3, 25.2 LTS SR3 and 24.8 LTS SR5 allows an authenticated attacker using M-Files Web to capture session tokens of other active users.

Affected Platforms

Unknown

Weakness Type

CWE-359

References