Skip to content
OpenAdvisories

Package · NuGet

Oqtane.Shared

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-55186

    Oqtane Framework Insecure Direct Object Reference vulnerability

    An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker c…

    Oqtane.Framework Oqtane.Server Oqtane.Client Oqtane.Shared NuGet