OroCalendarBundle has incorrect system calendar events visibility
OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.
- Auf 5.0.7 aktualisieren
- Auf 5.1.1 aktualisieren
Veröffentlicht Aktualisiert