CVE-2025-2159

Description

Stored XSS in Desktop UI in M-Files Server Admin tool before version 25.3.14681.7 on Windows allows authenticated local user to run scripts via UI

Affected Platforms

Weakness Type

CWE-79

References

• https://empower.m-files.com/security-advisories/CVE-2025-2159
• https://product.m-files.com/security-advisories/cve-2025-2159/