Skip to content
OpenAdvisories

Package · Packagist

oro/calendar-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.0
    CVE-2023-32062

    OroCalendarBundle has incorrect system calendar events visibility

    OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in…

    oroinc crm oro/calendar-bundle Packagist