CVE-2023-45824
published 2024-03-25CVE-2023-45824: OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This…
PriorityP419medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.44%
36.0th percentile
OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oro | platform | 4.2.0 – 4.2.10 | — |
| oro | platform | 5.0.0 – 5.0.12 | — |
| oro | platform | >= 5.1.0 < 5.1.4 | 5.1.4 |
| oroinc | oroplatform | >= 4.2.0 < 5.1.4 | 5.1.4 |
| oroinc | platform | — | — |
| oroinc | platform | — | — |
| oroinc | platform | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Pinned entity creation form shows wrong data
osv·2024-03-25
CVE-2023-45824 [MEDIUM] Pinned entity creation form shows wrong data
Pinned entity creation form shows wrong data
### Impact
Logged in user can access page state data of pinned pages of other users by pageId hash.
### Patch
```patch
--- src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php
+++ src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php
@@ -158,6 +158,13 @@
AbstractPageState::generateHash($this->get('request_stack')->getCurrentRequest()->get('pageId'))
);
+ if ($entity) {
+ $entity = $this->getEntity($entity->getId());
+ }
+ if (!$entity) {
+ return $this->handleNotFound();
+ }
+
return $this->handleView($this->view($this->getState($entity), Response::HTTP_OK));
}
```
GHSA
Pinned entity creation form shows wrong data
ghsa·2024-03-25
CVE-2023-45824 [MEDIUM] CWE-200 Pinned entity creation form shows wrong data
Pinned entity creation form shows wrong data
### Impact
Logged in user can access page state data of pinned pages of other users by pageId hash.
### Patch
```patch
--- src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php
+++ src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php
@@ -158,6 +158,13 @@
AbstractPageState::generateHash($this->get('request_stack')->getCurrentRequest()->get('pageId'))
);
+ if ($entity) {
+ $entity = $this->getEntity($entity->getId());
+ }
+ if (!$entity) {
+ return $this->handleNotFound();
+ }
+
return $this->handleView($this->view($this->getState($entity), Response::HTTP_OK));
}
```
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/oroinc/platform/commit/cf94df7595afca052796e26b299d2ce031e289cdhttps://github.com/oroinc/platform/security/advisories/GHSA-vxq2-p937-3px3https://github.com/oroinc/platform/commit/cf94df7595afca052796e26b299d2ce031e289cdhttps://github.com/oroinc/platform/security/advisories/GHSA-vxq2-p937-3px3
2024-03-25
Published