CVE-2024-55471

oqtane/oqtane.framework

on github

Published

Dec 20, 2024

Severity

CVSS v3:

N/A

CVSS v2:

N/A

Description

Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController. This allows unauthorized users to access sensitive information of other users by manipulating the id parameter.

References

https://github.com/oqtane/oqtane.framework/pull/4880/files
https://medium.com/@Rudra_2158/cve-2024-55471-breaking-down-the-idor-vulnerability-in-oqtane-framework-c0f4b02f12fc

Configurations

CPE23	Version Start	Version End	Exact Version

External Links

NVD - CVE-2024-55471