Oroinc
Oroinc Oroplatform: vulnerabilidades y CVE
Oroinc Oroplatform tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-50677 | Media (6.1) | 0.59% | — | 6 dic 2024 | A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter. |
| CVE-2023-48296 | Media (4.3) | 0.44% | — | 25 mar 2024 | OroPlatform is a PHP Business Application Platform (BAP). Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of… |
| CVE-2023-45824 | Media (4.3) | 0.44% | — | 25 mar 2024 | OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4. |
| CVE-2023-32062 | Media (4.3) | 0.54% | — | 27 nov 2023 | OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security… |
| CVE-2022-41951 | Crítica (9.8) | 0.95% | — | 27 nov 2023 | OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is possible in… |
| CVE-2021-43852 | Alta (8.8) | 1.1% | — | 4 ene 2022 | OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an attacker could inject properties into existing JavaScript language construct prototypes, such as… |
| CVE-2021-41236 | Media (4.8) | 0.67% | — | 4 ene 2022 | OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an… |