https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T11:16:00.365741+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159562 EUVD-2026-159562 2026-10-16T11:16:00.368262+00:00 EUVD-2026-159562 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45824 fkie_cve-2023-45824 2026-10-16T11:16:00.368304+00:00

OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.

 https://cve.radiocsirt.org/vuln/ghsa-vxq2-p937-3px3 GHSA-vxq2-p937-3px3 — Pinned entity creation form shows wrong data 2026-10-16T11:16:00.368336+00:00

Affected: Packagist: oro/platform

### Impact

Logged in user can access page state data of pinned pages of other users by pageId hash.

### Patch

```patch --- src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php +++ src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php @@ -158,6 +158,13 @@ AbstractPageState::generateHash($this->get('request_stack')->getCurrentRequest()->get('pageId')) ); + if ($entity) { + $entity = $this->getEntity($entity->getId()); + } + if (!$entity) { + return $this->handleNotFound(); + } + return $this->handleView($this->view($this->getState($entity), Response::HTTP_OK)); } ```

 https://cve.radiocsirt.org/vuln/gsd-2023-45824 gsd-2023-45824 2026-10-16T11:16:00.368369+00:00 gsd-2023-45824