Skip to content
OpenAdvisories

Package · Packagist

oro/platform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2022-41951

    OroPlatform vulnerable to path traversal during temporary file manipulations

    OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is possible in `Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName`. With this method, an attacke…

    oroinc platform oro/platform Packagist
  • High 8.8
    CVE-2021-43852

    JavaScript Prototype Pollution in oro/platform

    OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an attacker could inject properties into existing JavaScript language construct prototypes, such as objects. Later this injection may lead to JS c…

    oroinc platform oro/platform Packagist