Description (CNA)
OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| oroinc / platform | affected >=4.2.0, <=4.2.10; affected >=5.0.0, <=5.0.12; affected >= 5.1.0, <= 5.1.3 |
CWE
CWE-200
References
- https://github.com/oroinc/platform/security/advisories/GHSA-vxq2-p937-3px3
- https://github.com/oroinc/platform/commit/cf94df7595afca052796e26b299d2ce031e289cd
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.