CVE-2023-45824: Oroinc Oroplatform

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.

Affected products

• Oroinc Oroplatform: from 4.2.0, before 5.1.4 (fixed in 5.1.4)

Published 2024-03-25. Last modified 2026-06-17.