CVE-2023-45824

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-45824
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-45824.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-45824
Aliases
Published
2024-03-25T18:15:32Z
Modified
2025-10-30T20:23:52.059366Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
OroPlatform's pinned entity creation form shows pages of other users
Details

OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.

Database specific 
{
    "cwe_ids": [
        "CWE-200"
    ]
}
References

Affected packages

Git / github.com/oroinc/platform

Affected ranges

Type
GIT
Repo
https://github.com/oroinc/platform
Events
Introduced
02bffd6c9c5cef5a16916b4c96cd4fab109fb999
Last affected
eefc26f3bc926f5671ca4211a0d34137ca312e9b
Database specific 
{
    "versions": [
        {
            "introduced": "4.2.0"
        },
        {
            "last_affected": "4.2.10"
        }
    ]
}
Type
GIT
Repo
https://github.com/oroinc/platform
Events
Introduced
a98b3aa020dae96d8191a0cdfa94ad009ad41a3e
Last affected
ac69b11ed8f28aff24ec99856661b18560f4ed3e
Database specific 
{
    "versions": [
        {
            "introduced": "5.0.0"
        },
        {
            "last_affected": "5.0.12"
        }
    ]
}
Type
GIT
Repo
https://github.com/oroinc/platform
Events
Introduced
b7bd07777fe1952909ce37b1de3dd221d562ab97
Last affected
71ef6482d963e21c2d9b36956bdcc3357fd28302
Database specific 
{
    "versions": [
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.3"
        }
    ]
}

Affected versions

4.*

4.2.0
4.2.1
4.2.10
4.2.2
4.2.3
4.2.4
4.2.5
4.2.6
4.2.7
4.2.8
4.2.9

5.*

5.0.0
5.0.1
5.0.10
5.0.11
5.0.12
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.0.9
5.1.0
5.1.1
5.1.2
5.1.3