Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the manipulation of the notification ID in the request URL by a logged-in attacker. This issue due to insufficient authorization checks, enabling attackers to view sensitive mail details belonging to othe...

CVE-2024-55186

A security vulnerability exists in Oqtane Framework version 6.0.0 , an open-source content management system and application framework. The issue is an Insecure Direct Object Reference (IDOR) that occurs when the system fails to properly validate authorization for notification IDs. A logged-in us...

CVE-2024-55186

An IDOR Insecure Direct Object Reference vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...