Vulnerabilities in nl-portal

5 results

CVE-2026-55414MEDIUMNL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)EPSS 0.4%CVE-2026-54683MEDIUMNL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)EPSS 0.4%CVE-2026-49462MEDIUMnl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by defaultEPSS 0.4%CVE-2026-49464HIGHNL Portal: IDOR allows any authenticated user to complete and tamper with another user's taakEPSS 0.4%CVE-2026-49463MEDIUMNL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-librariesEPSS 0.3%