Insufficient Security Checks in OroPlatform Calendar Management System

CVE-2023-32062 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.

Learn more about our Cis Benchmark Audit For Microsoft Office.