Vulnerabilities

TI-2023-15369 CVE-2023-32065 · GHSA-88g2-xgh9-4ph2

OroCommerce get-totals-for-checkout API endpoint returns unwanted data

LOW 27

OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00491 Published 2023-11-28 Fixed in 5.0.11, 5.1.1 CWE-284

TI-2023-15368 CVE-2023-32064 · GHSA-8gwj-68w6-7v6c

LOW 23

OroCommerce package with customer portal and non authenticated visitor website base features.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00497 Published 2023-11-28 Fixed in 5.0.11, 5.1.1 CWE-284

TI-2022-16377 CVE-2022-35950 · GHSA-2jc6-3fhj-8q84

LOW 31

OroCommerce is an open-source Business to Business Commerce application.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00413 Published 2023-10-09 Fixed in 5.0.11, 5.1.1 CWE-79

TI-2022-13082 CVE-2022-31037 · GHSA-4vf4-955g-vxp2

LOW 31

OroCommerce is an open-source Business to Business Commerce application.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00503 Published 2022-10-18 Fixed in 5.0.6 CWE-79