CVE-2023-48296

CVSS V2 None CVSS V3 None

Description

OroPlatform is a PHP Business Application Platform (BAP). Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user. This vulnerability is fixed in 5.1.4.

Overview

CVE ID
CVE-2023-48296

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-03-25T18:19:43.561Z

Last Modified Date
2024-06-04T17:27:34.578Z

Weakness Enumerations

CWE	URL
CWE-200	http://cwe.mitre.org/data/definitions/200.html

References

Reference URL	Reference Tags
https://github.com/oroinc/orocommerce/security/advisories/GHSA-v7px-46v9-5qwp	x_refsource_CONFIRM
https://github.com/oroinc/orocommerce/commit/41c526498012d44cd88852c63697f1ef53b61db8	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-48296
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48296

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 23:31:26				Added to TrackCVE