CVEvulnerability

CVE-2023-32065

5.8 MEDIUM Published 2023-11-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-284

Description

OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be received by Order ID. This issue is patched in version 5.0.11 and 5.1.1.

Affected configurations

• oroinc orocommerce (>= 4.2.0 <= 4.2.10) • oroinc orocommerce (>= 5.0.0 < 5.0.11) • oroinc orocommerce (>= 5.1.0 < 5.1.1)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References