Veille CVE

Recherche « paperless-ngx »

1 CVE

  1. CVE-2026-71244 6.5 Moyenne

    paperless-ngx

    Paperless-ngx's MailAccountViewSet.test action, when called with an existing account's ID and a masked password field, reuses the stored password, account_type, refresh_token, and expiration from that existing account while allowing the caller to supply a different imap_server, imap_port, and imap_security in the same request.