Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2023/11/27 11:29 p.m.•39 views

GHSA-897W-JV7J-6R7G OroCRMCallBundle has incorrect call view page visibility

Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks...

5CVSS4.9AI score0.00538EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2023/11/27 11:29 p.m.•48 views

OroCRMCallBundle has incorrect call view page visibility

Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks...

5CVSS6.9AI score0.00538EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder