Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-32064

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8gwj-68w6-7v6c

OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility Back-office users can access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient security checks.

gitlab/packagist/oro/commerce/CVE-2023-32064

Improper Access Control OroCommerce package with customer portal and non authenticated visitor website base features. Back-office users can access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in version 5.0.11 and 5.1.1.

gitlab/packagist/oro/customer-portal/CVE-2023-32064

OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility Back-office users can access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient security checks.