CVE 5.6 MEDIUM

Unintended temporary cached data included in a structure only copy intended to be empty of data_CVE-2025-14267

5.6 / 10
MEDIUM
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Description

Incomplete removal of sensitive information before transfer vulnerability in M-Files Corporation M-Files Server allows data leak exposure affecting versions before 25.12.15491.7

Basic Information

ID CVE-2025-14267
Source M-Files Corporation
Published Dec 19, 2025 at 06:15

Affected Product

Vendor M-Files Corporation
Product M-Files Server
Affected Versions M-Files Corporation M-Files Server 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.