CVE-2023-32062

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-32062
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32062.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-32062
Aliases
Published
2023-11-27T20:58:35.357Z
Modified
2026-04-10T04:58:28.124037Z
Severity
  • 5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVSS Calculator
Summary
OroCalendarBundle has incorrect system calendar events visibility
Details

OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32062.json",
    "cwe_ids": [
        "CWE-284"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/oroinc/orocalendarbundle

Affected ranges

Type
GIT
Repo
https://github.com/oroinc/orocalendarbundle
Events
Introduced
02b399094bdabe39589b795f73e7e395267d91ce
Last affected
5c4144abf43ed4c502164a839da797252772fd1d
Database specific 
{
    "versions": [
        {
            "introduced": "4.2.0"
        },
        {
            "last_affected": "4.2.6"
        }
    ]
}
Type
GIT
Repo
https://github.com/oroinc/orocalendarbundle
Events
Introduced
3ab51e27e43b018eed1ae30a475e5932ee164cf2
Last affected
057d7376ddbe307b312d9520aaf528d5fcafdbcb
Database specific 
{
    "versions": [
        {
            "introduced": "5.0.0"
        },
        {
            "last_affected": "5.0.6"
        }
    ]
}
Type
GIT
Repo
https://github.com/oroinc/orocalendarbundle
Events
Introduced
f125afd7daabecbb997439f0aaf242299f505a24
Fixed
8d72eadda1f92c6cd036c485dbbc58ab31916b5b
Database specific 
{
    "versions": [
        {
            "introduced": "5.1.0"
        },
        {
            "fixed": "5.1.1"
        }
    ]
}

Affected versions

4.*
4.2.0
4.2.1
4.2.2
4.2.4
4.2.5
4.2.6
5.*
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32062.json"

Git / github.com/oroinc/platform

Affected ranges

Type
GIT
Repo
https://github.com/oroinc/platform
Events
Introduced
02bffd6c9c5cef5a16916b4c96cd4fab109fb999
Last affected
c25da4040cf8c61de516fb2dd140140ab5998746
Introduced
a98b3aa020dae96d8191a0cdfa94ad009ad41a3e
Fixed
1d1e5f67803da3d82a56e5a910f9c887d1946e77
Introduced
b7bd07777fe1952909ce37b1de3dd221d562ab97
Fixed
391060385315ab15dafacd21282842de207c5754
Database specific 
{
    "versions": [
        {
            "introduced": "4.2.0"
        },
        {
            "last_affected": "4.2.6"
        },
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "5.0.7"
        },
        {
            "introduced": "5.1.0"
        },
        {
            "fixed": "5.1.1"
        }
    ]
}

Affected versions

4.*
4.2.0
4.2.4
4.2.6
5.*
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32062.json"