GHSA-3vhm-q4w3-rw8q
OroPlatform Forced Redirect to External Website
6.1 MediumFix available
GHSA-3vhm-q4w3-rw8q is a medium vulnerability (CVSS 6.1) in oro/platform, published May 20, 2024. No source lists public exploit code. Fixed in oro/platform 1.7.4.
- Severity
- 6.1 MediumCVSS 3.1, GitHub Advisories
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.7.4oro/platform +1 more
Description
OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Affected packages
| Package | Affected | Fixed |
|---|---|---|
oro/platformPackagist | 1.7.0 up to 1.7.4 | 1.7.4 |
oro/platformPackagist | 1.7.0 up to 1.7.4, plus listed versions 1.7.11.7.21.7.3 | 1.7.4 |
What each source reports
GitHub Advisories Score used
OroPlatform Forced Redirect to External Website
OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.
- Record
GHSA-3vhm-q4w3-rw8q- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-601
- Updated
- 2026-11-02
OSV
OroPlatform Forced Redirect to External Website
OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.
- Record
GHSA-3vhm-q4w3-rw8q- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-601
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.