Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/46482?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/46482?format=api", "vulnerability_id": "VCID-mk5p-7x3m-v7hb", "summary": "Improper Access Control\nOroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.", "aliases": [ { "alias": "CVE-2023-32062" }, { "alias": "GHSA-x2xm-p6vq-482g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/689804?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/67880?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/67881?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.1.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/67869?format=api", "purl": "pkg:composer/oro/platform@4.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/67870?format=api", "purl": "pkg:composer/oro/platform@5.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/67871?format=api", "purl": "pkg:composer/oro/platform@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-h2ur-dutp-gqba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.1.1" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/67875?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/689799?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/689800?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/689801?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/689802?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/689803?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/67876?format=api", "purl": "pkg:composer/oro/calendar-bundle@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/67877?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/689805?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/689806?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/689807?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/689808?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/689809?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/67878?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/67879?format=api", "purl": "pkg:composer/oro/calendar-bundle@5.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/calendar-bundle@5.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/59956?format=api", "purl": "pkg:composer/oro/platform@4.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/549494?format=api", "purl": "pkg:composer/oro/platform@4.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/549495?format=api", "purl": "pkg:composer/oro/platform@4.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/549496?format=api", "purl": "pkg:composer/oro/platform@4.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/549497?format=api", "purl": "pkg:composer/oro/platform@4.2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/549498?format=api", "purl": "pkg:composer/oro/platform@4.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/67866?format=api", "purl": "pkg:composer/oro/platform@4.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-htv9-tpny-7ycn" }, { "vulnerability": "VCID-j1uw-vqqx-uuh2" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" }, { "vulnerability": "VCID-mp7m-9665-uqb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@4.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/67867?format=api", "purl": "pkg:composer/oro/platform@5.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/689793?format=api", "purl": "pkg:composer/oro/platform@5.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/689794?format=api", "purl": "pkg:composer/oro/platform@5.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/689795?format=api", "purl": "pkg:composer/oro/platform@5.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/689796?format=api", "purl": "pkg:composer/oro/platform@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/689797?format=api", "purl": "pkg:composer/oro/platform@5.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/689798?format=api", "purl": "pkg:composer/oro/platform@5.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-eh5a-tv8q-xkay" }, { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/67868?format=api", "purl": "pkg:composer/oro/platform@5.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-h2ur-dutp-gqba" }, { "vulnerability": "VCID-mk5p-7x3m-v7hb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/oro/platform@5.1.0" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-32062", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41344", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41316", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41347", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-32062" }, { "reference_url": "https://github.com/oroinc/crm", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/oroinc/crm" }, { "reference_url": "https://github.com/oroinc/OroCalendarBundle/commit/460a8ffb63b10c76f2fa26d53512164851c4909b", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/oroinc/OroCalendarBundle/commit/460a8ffb63b10c76f2fa26d53512164851c4909b" }, { "reference_url": "https://github.com/oroinc/OroCalendarBundle/commit/5f4734aa02088191c1c1d90ac0909f48610fe531", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/oroinc/OroCalendarBundle/commit/5f4734aa02088191c1c1d90ac0909f48610fe531" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32062", "reference_id": "CVE-2023-32062", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32062" }, { "reference_url": "https://github.com/advisories/GHSA-x2xm-p6vq-482g", "reference_id": "GHSA-x2xm-p6vq-482g", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x2xm-p6vq-482g" }, { "reference_url": "https://github.com/oroinc/crm/security/advisories/GHSA-x2xm-p6vq-482g", "reference_id": "GHSA-x2xm-p6vq-482g", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/oroinc/crm/security/advisories/GHSA-x2xm-p6vq-482g" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 284, "name": "Improper Access Control", "description": "The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mk5p-7x3m-v7hb" }