{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.0.0"}],"component":"Oqtane.Framework","cve_ids":["CVE-2024-55471"],"ecosystem":"NuGet","epss":0.00351,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hhcw-wwxv-g95c","id":"tcs_01M5N8R4GWEGW2KKMYP6EA0DAJ","modified_at":"2024-12-20T19:59:35.706915Z","published_at":"2024-12-20T18:31:32Z","references":["https://osv.dev/vulnerability/GHSA-hhcw-wwxv-g95c","https://nvd.nist.gov/vuln/detail/CVE-2024-55471","https://github.com/oqtane/oqtane.framework/pull/4880/files","https://github.com/oqtane/oqtane.framework","https://medium.com/@Rudra_2158/cve-2024-55471-breaking-down-the-idor-vulnerability-in-oqtane-framework-c0f4b02f12fc"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-hhcw-wwxv-g95c","url":"https://osv.dev/vulnerability/GHSA-hhcw-wwxv-g95c"}],"summary":"Oqtane Framework Insecure Direct Object Reference vulnerability"}