CVE-2023-48296

—

CVSS 3.1

4.3 medium

EPSS

<1%p37

Published

Mar 25, 2024 (Mar 25, 2024)

Modified

Jun 17, 2026

Description

OroPlatform is a PHP Business Application Platform (BAP). Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user. This vulnerability is fixed in 5.1.4.

Vendors: oroinc
Products: oroplatform
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.