Summary
Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in M-Files Server ausnutzen, um Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.
Product
M-Files ist eine Plattform zur Verwaltung von Unternehmensinformationen.
Vulnerabilities 3
-
Medium 6.3
Denial of Service condition in M-Files Server
Denial of service condition in M-Files Server in versions before 25.1.14445.5 allows an unauthenticated user to consume computing resources in certain conditions.
-
Medium 5.9
M-Files Server crash via EOT database driver configuration
Unexpected server crash in database driver in M-Files Server before 25.1.14445.5 and before 24.8 LTS SR3 allows a highly privileged attacker to cause denial of service via configuration change.
-
Medium 4.6
Unsafe stored password recovery
Unsafe password recovery from configuration in M-Files Server before 25.1 allows a highly privileged user to recover external connector passwords
Revision history
-
#1
Initiale Fassung
References
-
M-Files Security Advisory CVE-2025-0619 vom 2025-01-22
https://product.m-files.com/security-advisories/cve-2025-0619/
-
M-Files Security Advisory CVE-2025-0635 vom 2025-01-22
https://product.m-files.com/security-advisories/cve-2025-0635/
-
M-Files Security Advisory CVE-2025-0648 vom 2025-01-22
https://product.m-files.com/security-advisories/cve-2025-0648/