Vulnerability · Published Dec 20, 2024 · Assigned by mitre
CVE-2024-55186
Medium 4.3
In plain English
A medium-severity authorization bypass via user-controlled key in the oqtane.client package (NuGet). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 78.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| NuGet | oqtane.client | no fix listed | GHSA-2hr5-cvwp-jr5w |
| NuGet | oqtane.framework | no fix listed | GHSA-2hr5-cvwp-jr5w |
| NuGet | oqtane.server | no fix listed | GHSA-2hr5-cvwp-jr5w |
| NuGet | oqtane.shared | no fix listed | GHSA-2hr5-cvwp-jr5w |
Affected products (as reported)
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N