MEDIUM6.1

GHSA-3vhm-q4w3-rw8q

OroPlatform Forced Redirect to External Website

Quick fix

GHSA-3vhm-q4w3-rw8q — oro/platform: upgrade to the fixed version with the command below.

composer require oro/platform:^1.7.4

Details

OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/oro/platform

Introduced in: 1.7.0Fixed in: 1.7.4

Fixcomposer require oro/platform:^1.7.4

References