GitHub Advisoryadvisory · Packagist
GHSA-vxq2-p937-3px3 Pinned entity creation form shows wrong data
MEDIUM
Official page ↗
- Aliases
- CVE-2023-45824
- Ecosystem
- Packagist
- Packages
- oro/platform
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-200
- Reviewed
- 2024-03-25
Affected packages
• Packagist oro/platform: >= 5.1.0, < 5.1.4 → fixed in 5.1.4
• Packagist oro/platform: >= 5.0.0, <= 5.0.12 (no fix yet)
• Packagist oro/platform: >= 4.2.0, <= 4.2.10 (no fix yet)
Description
Impact
Logged in user can access page state data of pinned pages of other users by pageId hash.
Patch
```patch
--- src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php
+++ src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php
@@ -158,6 +158,13 @@
AbstractPageState::generateHash($this->get('request_stack')->getCurrentRequest()->get('pageId'))
);
+ if ($entity) {
+ $entity = $this->getEntity($entity->getId());
+ }
+ if (!$entity) {
+ return $this->handleNotFound();
+ }
+
return $this->handleView($this->view($this->getState($entity), Response::HTTP_OK));
}
```
Related
Alias · CVE (1)
- CVE-2023-45824 OroPlatform is a PHP Business Application Platform (BAP). vulnerability
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness