CVE Browser

CSS injection in M-Files Web

HTML injection in M-Files Web

Denial-of-service vulnerability in M-Files Server

Denial of service vulnerability in M-Files Server

Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an un…

Denial of Service condition in M-Files Server

Session Token Disclosure in M-Files Web

Unintended temporary cached data included in a structure only copy intended to be empty of data

Improper access validation in M-Files Server

Denial of Service condition in M-Files Server

Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users.

Open redirection in M-Files Mobile

Path traversal in M-Files API

Stored XSS Vulnerability in M-Files Web

User in anonymous role could create and delete views

Stored XSS in M-Files Admin user interface

Denial of Service condition in M-Files Server

Unsafe stored password recovery

M-Files Server crash via EOT database driver configuration

Local file inclusion vulnerability in M-Files Server

Support for authentication bypass condition in M-Files LDAP authentication

Incorrect evaluation of effective permissions in M-Files Aino

Permission bypass in M-Files Connector for Copilot

Stored HTML Injection in Hubshare social module

Path traversal in M-Files API