Description

Improper access checks in M-Files Server before 25.12.15491.7 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled.

Related CPE's

Could not find any relations

References

https://product.m-files.com/security-advisories/cve-2025-14318/

Weaknesses

[email protected]

Secondary
CWE-863

CVSS impact metrics

Missing metrics for CVSS V

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Undergoing analysis

Published

2025-12-18T08:15:49.653

31 hours ago

Last modified

2025-12-19T07:16:01.167

8 hours ago