← Database

CVE-2024-55471

MEDIUM CVSS: 6.5 Published: 2024-12-20 Modified: 2026-06-17

Description

Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController. This allows unauthorized users to access sensitive information of other users by manipulating the id parameter.

Affected Platforms

Unknown

Weakness Type

CWE-639

References