Beveiligingsadvies

CVE-2026-35462

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-07 14:30:17

Laatst bijgewerkt 2026-04-07 17:54:02

Toegewezen door GitHub_M

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, API keys with an expiresAt date are never validated against the current time during authentication. Any API key — regardless of its expiration date — is accepted indefinitely, allowing a user whose key has expired to continue accessing all protected endpoints as if the key were still valid. This vulnerability is fixed in 26.4.0.

← Alle CVE's bekijken Bekijk op cve.org ↗