CVE-2024-55471

Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController

Medium · published December 20, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController. This allows unauthorized users to access sensitive information of other users by manipulating the id parameter.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.6th percentile
Published
2024-12-20T00:00Z
EPSS history
Timeline
  • 20 DEC 00:00Z
    Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController
    cvelistv5