GHSA-3vhm-q4w3-rw8q
GHSA-3vhm-q4w3-rw8q · OroPlatform Forced Redirect to External Website
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.
CVSS 6.1 · Medium · Fix available
- Published
- Updated
Stack: php
Affected products and versions
oro/platform Packagist
- Versions
- 1.7.0
- 1.7.1
- 1.7.2
- 1.7.3
- Affected ranges
- ECOSYSTEM: ≥ 1.7.0, < 1.7.4
Update to 1.7.4
Original sources
- https://github.com/oroinc/platform/commit/baf79ad4f6b32bd2834b1766745afb20a5ef4739
- https://github.com/FriendsOfPHP/security-advisories/blob/master/oro/platform/2015-07-08.yaml
- https://github.com/oroinc/platform
- https://oroinc.com/orocrm/blog/orocrm-security-announcement
- https://osv.dev/vulnerability/GHSA-3vhm-q4w3-rw8q