Skip to content
OpenAdvisories

Package · Packagist

oro/crm-call-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2023-32063

    OroCRMCallBundle has incorrect call view page visibility

    OroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in v…

    oroinc crm oro/crm-call-bundle Packagist