Lucene search
HistoryMar 25, 2024 - 7:15 p.m.
CVE-2023-45824
oroplatform
php
business application platform
user data access
vulnerability
fixed
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0
Percentile
9.0%
OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.
Related
cvelist
cvelist
github
github
Pinned entity creation form shows wrong data
2024-03-25 19:39:21
osv
osv
CVE-2023-45824
2024-03-25 19:15:57
Pinned entity creation form shows wrong data
2024-03-25 19:39:21
veracode
veracode
Unauthorized Access
2024-03-29 13:16:43
cve
cve
CVE-2023-45824
2024-03-25 19:15:57
vulnrichment
vulnrichment
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-45824