Security Advisory

CVE-2025-13008

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-19 07:04:19

Last updated 2026-02-23 10:34:29

Assigner M-Files Corporation

CVSS score 8.6

State PUBLISHED

Description

An information disclosure vulnerability in M-Files Server before versions 25.12.15491.7, 25.8 LTS SR3, 25.2 LTS SR3 and 24.8 LTS SR5 allows an authenticated attacker using M-Files Web to capture session tokens of other active users.

← Browse all CVEs View on cve.org ↗