CVE-2023-45824
OroPlatform's pinned entity creation form shows pages of other users
Summary
OroPlatform's pinned entity creation form shows pages of other users
Original description
The description as published by the source.
OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com