CVE-2024-12582

creationtimestamp| type| source ---|---|--- 2024-12-24 03:37:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113705709008355890 2024-12-24 04:15:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzli7bp5a2i 2024-12-24 06:02:16+00:00| seen|...

CVE-2024-11230

creationtimestamp| type| source ---|---|--- 2024-12-23 04:33:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113700268905676956 2024-12-23 05:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldx6escxdn2z 2024-12-23 06:37:54+00:00| seen|...

CVE-2024-47864

creationtimestamp| type| source ---|---|--- 2024-12-23 00:37:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113699339312969404 2024-12-23 00:40:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113699351923604048 2024-12-23 01:15:38+00:00| seen|...

CVE-2024-12897

creationtimestamp| type| source ---|---|--- 2024-12-22 23:34:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113699093986719156 2024-12-23 00:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwnn2fov725 2024-12-23 02:27:00+00:00| seen|...

CVE-2024-12895

creationtimestamp| type| source ---|---|--- 2024-12-22 14:08:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113696867576122046 2024-12-22 14:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldvm3flrkm2k 2024-12-22 16:24:56+00:00| seen|...

CVE-2024-12892

creationtimestamp| type| source ---|---|--- 2024-12-22 07:39:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113695336011285378 2024-12-22 08:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxtvmzg2z 2024-12-22 09:43:33+00:00| seen|...

CVE-2024-10453

creationtimestamp| type| source ---|---|--- 2024-12-21 09:27:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113690099314651732 2024-12-21 10:15:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso72j3k325 2024-12-21 11:59:23+00:00| seen|...

CVE-2024-12771

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse6f7fhc2m 2024-12-21 07:44:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113689695602544719 2024-12-21 08:38:37+00:00| seen|...

CVE-2024-12697

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse67bfbr25 2024-12-21 07:44:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113689695572309033 2024-12-21 08:38:36+00:00| seen|...

CVE-2024-11975

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5t67pk2l 2024-12-21 07:29:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113689636519016726 2024-12-21 08:38:44+00:00| seen|...

CVE-2024-11287

creationtimestamp| type| source ---|---|--- 2024-12-21 07:11:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113689564873714213 2024-12-21 07:14:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113689577453876508 2024-12-21 07:15:28+00:00| seen|...

CVE-2024-11977

creationtimestamp| type| source ---|---|--- 2024-12-21 05:33:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113689178079591745 2024-12-21 06:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsasqi2z525 2024-12-21 07:48:24+00:00| seen|...

CVE-2023-31279

creationtimestamp| type| source ---|---|--- 2024-12-20 23:41:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113687794738561969 2024-12-21 00:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrmpcfrft2l 2024-12-21 01:57:10+00:00| seen|...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

GHSA-2HR5-CVWP-JR5W Oqtane Framework Insecure Direct Object Reference vulnerability

An IDOR Insecure Direct Object Reference vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

Oqtane Framework Insecure Direct Object Reference vulnerability

An IDOR Insecure Direct Object Reference vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

CVE-2024-55186

An IDOR Insecure Direct Object Reference vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...