CVE-2023-32062 (published 2023-11-27T20:58:35.357Z)
OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.
Affected products: Vendor: oroinc
Product: crm
Versions: >= 4.2.0, <= 4.2.6, >= 5.0.0, <= 5.0.6, >= 5.1.0, < 5.1.1