CVE-2023-48296 OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID

[
  {
    "vendor": "oroinc",
    "product": "orocommerce",
    "versions": [
      {
        "status": "affected",
        "version": ">=4.1.0, <=4.1.13"
      },
      {
        "status": "affected",
        "version": ">=4.2.0, <=4.2.10"
      },
      {
        "status": "affected",
        "version": ">=5.0.0, <=5.0.11"
      },
      {
        "status": "affected",
        "version": ">=5.1.0, <=5.1.3"
      }
    ]
  }
]