CVE-2024-11975

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5t67pk2l 2024-12-21 07:29:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113689636519016726 2024-12-21 08:38:44+00:00| seen|...

CVE-2024-11287

creationtimestamp| type| source ---|---|--- 2024-12-21 07:11:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113689564873714213 2024-12-21 07:14:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113689577453876508 2024-12-21 07:15:28+00:00| seen|...

CVE-2024-11977

creationtimestamp| type| source ---|---|--- 2024-12-21 05:33:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113689178079591745 2024-12-21 06:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsasqi2z525 2024-12-21 07:48:24+00:00| seen|...

CVE-2023-31279

creationtimestamp| type| source ---|---|--- 2024-12-20 23:41:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113687794738561969 2024-12-21 00:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrmpcfrft2l 2024-12-21 01:57:10+00:00| seen|...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

GHSA-2HR5-CVWP-JR5W Oqtane Framework Insecure Direct Object Reference vulnerability

An IDOR Insecure Direct Object Reference vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

Oqtane Framework Insecure Direct Object Reference vulnerability

An IDOR Insecure Direct Object Reference vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

CVE-2024-55186

An IDOR Insecure Direct Object Reference vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

CVE-2024-55186

An IDOR Insecure Direct Object Reference vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

CVE-2024-10385

creationtimestamp| type| source ---|---|--- 2024-12-20 15:54:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113685957516698614 2024-12-20 16:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqrull2eo22 2024-12-20 18:25:30+00:00| seen|...

CVE-2024-56351

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576606594868 2024-12-20 15:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj7qldz2x 2024-12-20 16:45:00+00:00| seen|...

CVE-2024-56348

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576561934015 2024-12-20 15:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoiyzizh2s 2024-12-20 16:45:01+00:00| seen|...

CVE-2024-12571

creationtimestamp| type| source ---|---|--- 2024-12-20 07:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpmvawe23 2024-12-20 07:50:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113684057166107368 2024-12-20 09:13:10+00:00| seen|...

CVE-2024-11806

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptp56mnj22 2024-12-20 07:20:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683939101269205 2024-12-20 09:13:15+00:00| seen|...

CVE-2024-11784

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptp2us4i2a 2024-12-20 07:20:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683939085318685 2024-12-20 09:13:12+00:00| seen|...

CVE-2024-11331

creationtimestamp| type| source ---|---|--- 2024-12-20 07:05:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683880024480688 2024-12-20 07:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptomtz2z2a 2024-12-20 09:13:24+00:00| seen|...

CVE-2024-44292

creationtimestamp| type| source ---|---|--- 2024-12-20 04:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmvsqqd2g 2024-12-20 04:25:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113683251724054879 2024-12-20 05:52:29+00:00| seen|...