GHSA-3vhm-q4w3-rw8q: OroPlatform Forced Redirect to External Website

May 20, 2024

OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.

References

github.com/FriendsOfPHP/security-advisories/blob/master/oro/platform/2015-07-08.yaml
github.com/advisories/GHSA-3vhm-q4w3-rw8q
github.com/oroinc/platform
github.com/oroinc/platform/commit/baf79ad4f6b32bd2834b1766745afb20a5ef4739
oroinc.com/orocrm/blog/orocrm-security-announcement

Code Behaviors & Features

Detect and mitigate GHSA-3vhm-q4w3-rw8q with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →