CVE-2023-32065 — OroCommerce get-totals-for-checkout API endpoint returns unwanted data
OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be received by Order ID. This issue…
Published: 2023-11-28 · CVSS: 5.8 · CVSS 3.1
OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be received by Order ID. This issue is patched in version 5.0.11 and 5.1.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7