← Back

Heinlein

heinlein

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Opencloud Reva
opencloud_reva
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-23989
1Heinlein
1Opencloud Reva
Feb 24, 2026
Feb 6, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link....Show more
REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3.Show less