CVE-2025-0635

Denial of service condition in M-Files Server in versions before 25.1.14445.5 allows an unauthenticated user to consume computing resources in certain conditions.

Score

CVSS 3.1 7.5 High

Status

Modified - security@m-files.com

Published

2025-01-23

Last modified

2026-02-23

Weaknesses

CWE-770

Affected products

• M-files Server (M-files)
• M-files Server (M-files Corporation)

References

• https://empower.m-files.com/security-advisories/CVE-2025-0635
• https://product.m-files.com/security-advisories/cve-2025-0635/