Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-32063

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-897w-jv7j-6r7g

OroCRMCallBundle has incorrect call view page visibility Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks.

gitlab/packagist/oro/crm-call-bundle/CVE-2023-32063

OroCRMCallBundle has incorrect call view page visibility Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks.

gitlab/packagist/oro/crm/CVE-2023-32063

Improper Access Control OroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in version 5.0.4 and 5.1.1.