Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

oro/platform

4 known vulnerabilities (2 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 high, 2 medium
Registry
Packagist

Advisories 4

  • CVE-2023-45824Medium 4.3

    OroPlatform's pinned entity creation form shows pages of other users

    Affected: from 5.1.0, fixed in 5.1.4; from 5.0.0, through 5.0.12; from 4.2.0, through 4.2.10.

  • OroPlatform vulnerable to path traversal during temporary file manipulations

    Affected: from 4.1.0, through 4.1.13; from 4.2.0, through 4.2.10; from 5.0.0, fixed in 5.0.8.

  • JavaScript Prototype Pollution in oro/platform

    Affected: from 4.1.0, fixed in 4.1.14; from 4.2.0, fixed in 4.2.8.

  • CVE-2021-41236Medium 6.9

    XSS vulnerability in oro/platform

    Affected: from 3.1.0, fixed in 3.1.21; from 4.1.0, fixed in 4.1.14; from 4.2.0, fixed in 4.2.8.