Lucene search
PRIOn knowledge basePRION:CVE-2023-32065HistoryNov 28, 2023 - 4:15 a.m.
Design/Logic Flaw
2023-11-2804:15:00
PRIOn knowledge base
www.prio-n.com
6
orocommerce
business to business
application
order totals
patch
nvd
OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be received by Order ID. This issue is patched in version 5.0.11 and 5.1.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| orocommerce | ge | 4.2.0 | |
| orocommerce | le | 4.2.10 | |
| orocommerce | ge | 5.1.0 | |
| orocommerce | lt | 5.1.1 | |
| orocommerce | ge | 5.0.0 | |
| orocommerce | lt | 5.0.11 |
Related
cvelist
cvelist
nvd
nvd
CVE-2023-32065
2023-11-28 04:15:07
github
github
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
2023-11-27 23:29:52
osv
osv
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
2023-11-27 23:29:52
CVE-2023-32065
2023-11-28 04:15:07
cve
cve
CVE-2023-32065
2023-11-28 04:15:07
veracode
veracode
Information Disclosure
2023-11-29 09:58:37