| Package | Affected versions | Patched versions |
|---|---|---|
| oro/crm-call-bundle | ≥ 4.2.0, ≤ 4.2.5≥ 5.0.0, < 5.0.4≥ 5.1.0, < 5.1.1 | 5.0.45.1.1 |
| client relationship management | ≥ 4.2.0, ≤ 4.2.5≥ 5.0.0, < 5.0.4≥ 5.1.0, < 5.1.1 | 5.0.45.1.1 |
Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free