{"affected":[{"product":"reva","source":"CNA: GitHub_M","vendor":"opencloud-eu","versions":[{"status":"affected","version":"< 2.40.5"},{"status":"affected","version":"< 2.46.4"}]}],"cveId":"CVE-2026-57500","cwes":["CWE-200"],"description":"REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata folders in the spaces of an authenticated user. This can lead to unwanted ways of interaction with the data. This issue has been patched in versions 2.40.5 and 2.46.4.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}],"modifiedAt":1794420969800,"publishedAt":1794420969800,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/opencloud-eu/reva/security/advisories/GHSA-3v8c-738m-4gcj"}],"remediation":[],"revision":"34a8cf9983cd72bbfd96e8e98e0cca28ff148c394a5d05a8852bb72cbb92515c","sources":[{"modifiedAt":1794420969800,"name":"CNA: GitHub_M","retrievedAt":1794424148963,"url":"https://www.cve.org/CVERecord?id=CVE-2026-57500"}],"ssvc":null,"status":"published","title":"REVA: Access to internal metadata","updatedAt":1794424148963}