CVE-2024-12895

creationtimestamp| type| source ---|---|--- 2024-12-22 14:08:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113696867576122046 2024-12-22 14:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldvm3flrkm2k 2024-12-22 16:24:56+00:00| seen|...

CVE-2024-12892

creationtimestamp| type| source ---|---|--- 2024-12-22 07:39:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113695336011285378 2024-12-22 08:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxtvmzg2z 2024-12-22 09:43:33+00:00| seen|...

CVE-2024-10453

creationtimestamp| type| source ---|---|--- 2024-12-21 09:27:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113690099314651732 2024-12-21 10:15:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso72j3k325 2024-12-21 11:59:23+00:00| seen|...

CVE-2024-12771

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse6f7fhc2m 2024-12-21 07:44:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113689695602544719 2024-12-21 08:38:37+00:00| seen|...

CVE-2024-12697

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse67bfbr25 2024-12-21 07:44:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113689695572309033 2024-12-21 08:38:36+00:00| seen|...

CVE-2024-11975

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5t67pk2l 2024-12-21 07:29:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113689636519016726 2024-12-21 08:38:44+00:00| seen|...

CVE-2024-11287

creationtimestamp| type| source ---|---|--- 2024-12-21 07:11:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113689564873714213 2024-12-21 07:14:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113689577453876508 2024-12-21 07:15:28+00:00| seen|...

CVE-2024-11977

creationtimestamp| type| source ---|---|--- 2024-12-21 05:33:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113689178079591745 2024-12-21 06:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsasqi2z525 2024-12-21 07:48:24+00:00| seen|...

CVE-2023-31279

creationtimestamp| type| source ---|---|--- 2024-12-20 23:41:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113687794738561969 2024-12-21 00:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrmpcfrft2l 2024-12-21 01:57:10+00:00| seen|...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

GHSA-2HR5-CVWP-JR5W Oqtane Framework Insecure Direct Object Reference vulnerability

An IDOR Insecure Direct Object Reference vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

Oqtane Framework Insecure Direct Object Reference vulnerability

An IDOR Insecure Direct Object Reference vulnerability exists in Oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

CVE-2024-55186

An IDOR Insecure Direct Object Reference vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

CVE-2024-55186

An IDOR Insecure Direct Object Reference vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

CVE-2024-10385

creationtimestamp| type| source ---|---|--- 2024-12-20 15:54:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113685957516698614 2024-12-20 16:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqrull2eo22 2024-12-20 18:25:30+00:00| seen|...

CVE-2024-56351

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576606594868 2024-12-20 15:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj7qldz2x 2024-12-20 16:45:00+00:00| seen|...

CVE-2024-56348

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576561934015 2024-12-20 15:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoiyzizh2s 2024-12-20 16:45:01+00:00| seen|...