CVE-2023-45824
OroPlatform's pinned entity creation form shows pages of other users
Résumé
OroPlatform's pinned entity creation form shows pages of other users
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com