CVE-2023-32062 — OroCalendarBundle has incorrect system calendar events visibility
OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restri…
Published: 2023-11-27 · CVSS: 5.0 · CVSS 3.1
OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7