CVE-2023-32062

Published November 27th, 2023

View on NVD ↗

CVSS v3

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.

oroinc/crm

Main OroCRM package with core functionality.

GitHub

680

oroinc/OroCalendarBundle

OroPlatform package, enables system and user calendars management.

GitHub