CVE Catalog
CVE-2026-23931
MediumCVSS 5.3Summary
The frontend validate.api.exists action can be exploited by authenticated users to extract plaintext user macro values, leading to potential loss of confidentiality.
Risk Assessment
Disclosure of macro values may allow an attacker to obtain sensitive information such as passwords or API keys.
Recommendation
Apply vendor patches and restrict access to the validate.api.exists action to trusted users only.
Original NVD description (English source)
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.