Advisories · Technology
oqtane.framework.
Every CVE that names oqtane.framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Oqtane Framework before 10.3.0 SSRF via File Upload From URL
- oqtane.framework
- Server-side request forgery (SSRF)
- CVSS 7.4 High
Oqtane Framework before 10.3.0 Broken Access Control via SettingController
- oqtane.framework
- Broken access control
- CVSS 6.9 Medium
Oqtane Framework through 10.2.6 Cross-Site Settings Disclosure via Setting API
- Oqtane Framework
- Broken access control