CVE-2026-23989: opencloud-eu reva, заобикаляне на вход и права

Описание

Оригинално описание

REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3.

Засегнати продукти

• opencloud-eu reva: < 2.40.3; >= 2.41.0, < 2.42.3

Вид слабост

• CWE-863 Incorrect Authorization

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23989
• https://nvd.nist.gov/vuln/detail/CVE-2026-23989
• https://github.com/opencloud-eu/reva/security/advisories/GHSA-9j2f-3rj3-wgpg
• https://github.com/opencloud-eu/reva/commit/95aa2bc5d980eaf6cc134d75782b4f5ac7b36ae1