Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-12862 EUVD-2025-12377GHSA-v3cw-79rq-fhpq

REST API allows users without permissions to remove external collaborators

Published Apr 21, 2025 · Updated Apr 21, 2025 · Assigned by OpenText

Description

Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.

Affected products

VendorProductAffectedFixed
OpenText Content Server 20.2-24.4 —

References