CVE-2026-23931 — Frontend plaintext macro value enumeration via the validatate.api.exists action
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.
Published: 2026-08-18 · CVSS: 5.3 · CVSS 4.0
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7