CVE-2024-55186

Summary

CVE-2024-55186 is a newly identified IDOR (Insecure Direct Object Reference) vulnerability affecting oqtane Framework version 6.0.0. This issue allows a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By exploiting this vulnerability, an unauthorized attacker can gain access to sensitive mail details of other users, potentially leading to data leakage or other malicious activities. This vulnerability underscores the importance of input validation and access control measures to prevent unintended data access in web applications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.