CVE-2023-32062

Publication date

2023-11-27 20:58:35

Family

GitHub_M

State

PUBLISHED

Description

OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.