← Back

CVE-2026-67400

nvd nist
Published: Oct 27, 2026Modified: Oct 27, 2026

JSON object

Loading...
3.5
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Exploitability: 2.1 / Impact: 1.4
Source: support@hackerone.com (Secondary)

Description

A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: support@hackerone.com

Timeline

No history available yet.