Description
OroCRM is prone to open redirection which could allow attackers to redirect users to external website.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | oro/crm | >= 1.7.0, < 1.7.4 | 1.7.4 | GHSA-v8hp-239v-9367 |
Medium · 6.1
GHSA-v8hp-239v-9367
OroCRM Forced Redirect to External Website
Published May 20, 2024 · Updated Dec 5, 2024 · Assigned by GHSA