OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.
CPE | Name | Operator | Version |
---|---|---|---|
oroplatform | ge | 5.1.0 | |
oroplatform | lt | 5.1.1 | |
oroplatform | ge | 5.0.0 | |
oroplatform | lt | 5.0.7 | |
oroplatform | ge | 4.2.0 | |
oroplatform | le | 4.2.6 |