CVE-2023-32062

OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1...

CVE-2023-32062

creationtimestamp| type| source ---|---|--- 2023-12-17 11:06:32+00:00| seen| https://t.me/ctinow/155573...

CVE-2023-32062

CVE-2023-32062 affects OroPlatform/OroCalendarBundle where back-office users can access information from any system calendar event due to insufficient ACL checks. The issue is described across multiple sources (including Veracode and RH Red Hat) as an improper access control vulnerability in the ...