Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
6 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.
Recommended action: Upgrade to 1.7.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Logged in user can access page state data of pinned pages of other users by pageId hash. Patch
Recommended action: Upgrade to 5.1.4; some affected versions have no fix yet, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Path Traversal is possible in Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName. With this method, an attacker can pass the path to a non-existent file, which will allow writing the content to a new file that will be available during script execution. The file will be deleted immediately after the script ends. Workarounds Apply patch Or decorate Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName in your customization and clear $suggestedFileName argument References - Path Traversal - How to Decorate Services
Recommended action: Upgrade to 5.0.8; some affected versions have no fix yet, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An attacker with admin privileges and access to Translations management functionality may add JS payload to translation values via: - Translation management UI. - Translations downloaded via the Crowdin service may also contain JS strings used for XSS attacks, for a successful attack poisoned translation should be enabled, downloaded, and installed. - Translations uploaded via Upload translation file on the All Languages grid Workarounds There are no workarounds that address this vulnerability.
Recommended action: Upgrade to 4.2.8, 4.1.17 or 3.1.29 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Email template preview is vulnerable to XSS payload added to email template content. The attacker should have permission to create or edit an email template. For successful payload, execution attacked user should preview a vulnerable email template. Workarounds There are no workarounds that address this vulnerability.
Recommended action: Upgrade to 4.2.8, 4.1.14 or 3.1.21 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
By sending a specially crafted request, an attacker could inject properties into existing JavaScript language construct prototypes, such as objects. Later this injection may lead to JS code execution by libraries that are vulnerable to Prototype Pollution. Workarounds Configure WAF to drop requests containing next strings: proto , constructor[prototype], constructor.prototype
Recommended action: Upgrade to 4.2.8 or 4.1.14 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.