GHSA-v8hp-239v-9367
GHSA-v8hp-239v-9367 · OroCRM Forced Redirect to External Website
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OroCRM is prone to open redirection which could allow attackers to redirect users to external website.
CVSS 6.1 · Medium · Fix available
- Published
- Updated
Stack: php
Affected products and versions
oro/crm Packagist
- Versions
- 1.7.0
- 1.7.1
- 1.7.2
- 1.7.3
- Affected ranges
- ECOSYSTEM: ≥ 1.7.0, < 1.7.4
Update to 1.7.4
Original sources
- https://github.com/oroinc/crm/commit/f86a959dcd77af09e7a5a5930a60cf409924a2be
- https://github.com/FriendsOfPHP/security-advisories/blob/master/oro/crm/2015-07-08.yaml
- https://github.com/oroinc/crm
- https://oroinc.com/orocrm/blog/orocrm-security-announcement
- https://osv.dev/vulnerability/GHSA-v8hp-239v-9367