Skip to content
OpenAdvisories

Vendor

oqtane

3 known vulnerabilities.

Products

oqtane.framework 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-122008

    Oqtane Framework before 10.3.0 SSRF via File Upload From URL

    Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the UploadFile endpoint of FileController.cs that allows authenticated registered users to make the server fetch arbitrary URLs by supplying a caller-controlled url paramet…

    oqtane oqtane.framework
  • Medium 6.5
    CVE-2026-122007

    Oqtane Framework before 10.3.0 Broken Access Control via SettingController

    Oqtane Framework before 10.3.0 contains a broken access control vulnerability in SettingController.cs that allows an authenticated site administrator to read and modify settings belonging to other sites within the same tenant database by supplying an arbitrar…

    oqtane oqtane.framework
  • Medium 4.9
    CVE-2026-111616

    Oqtane Framework through 10.2.6 Cross-Site Settings Disclosure via Setting API

    Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site…

    oqtane oqtane.framework