Medium · 4.4 CVE-2022-4858 EUVD-2022-52124GHSA-cmrr-4p45-4xv3

Insertion of Sensitive Information into Log File

Published Dec 30, 2022 · Updated Feb 23, 2026 · Assigned by M-Files Corporation

Description

Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set.

Affected products

Vendor	Product	Affected	Fixed
M-Files	M-Files Server	< 22.10.11846.0	22.10.11846.0

References

https://www.m-files.com/about/trust-center/security-advisories/cve-2022-4858/
https://product.m-files.com/security-advisories/cve-2022-4858/ vendor-advisory
https://empower.m-files.com/security-advisories/CVE-2022-4858 vendor-advisory