PT-2026-80344 · Go · Github.Com/Cloudreve/Cloudreve+2
Published
2026-08-18
·
Updated
2026-08-18
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Cloudreve: Information Exposure in
GET /api/v4/user/search: SearchActive omits the active-status predicate, leaking inactive/banned account emails in github.com/cloudreve/Cloudreve Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Github.Com/Cloudreve/Cloudreve
Github.Com/Cloudreve/Cloudreve/V3
Github.Com/Cloudreve/Cloudreve/V4