CVE-2026-57500
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Nov 11, 2026
Vendor
unknown
Description
REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata folders in the spaces of an authenticated user. This can lead to unwanted ways of interaction with the data. This issue has been patched in versions 2.40.5 and 2.46.4.