Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-57500 EUVD-2026-123681

REVA: Access to internal metadata

Published Nov 11, 2026 · Updated Nov 12, 2026 · Assigned by GitHub_M

Description

REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata folders in the spaces of an authenticated user. This can lead to unwanted ways of interaction with the data. This issue has been patched in versions 2.40.5 and 2.46.4.

Affected products

VendorProductAffectedFixed
opencloud-eu reva < 2.40.5, < 2.46.4 —

References