CVE-2023-48296: 
PHP vulnerability analysis and mitigation

OroPlatform is a PHP Business Application Platform (BAP) that experienced a security vulnerability identified as CVE-2023-48296. The vulnerability was discovered where navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user. This issue affects versions >=4.1.0, <=4.1.13 || >=4.2.0, <=4.2.10 || >=5.0.0, <=5.0.11 || >=5.1.0, <=5.1.3 and has been fixed in version 5.1.4 (GitHub Advisory).

The vulnerability has been classified with a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability is network accessible, requires low attack complexity, needs low privileges, requires no user interaction, has unchanged scope, with low impact on confidentiality and no impact on integrity or availability. The vulnerability is categorized as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) (GitHub Advisory).

The vulnerability allows storefront users to access navigation history, most viewed items, and favorite navigation items of back-office users who share the same ID. This results in unauthorized access to potentially sensitive browsing data of back-office users (GitHub Advisory).

The vulnerability can be exploited by a storefront user with low privileges. The attack requires network access but is relatively straightforward to execute as it requires no user interaction. The attacker needs only to have an ID that matches a back-office user's ID to gain access to their navigation data (GitHub Advisory).

The vulnerability has been patched in version 5.1.4 of the software. Organizations using affected versions (>=4.1.0, <=4.1.13 || >=4.2.0, <=4.2.10 || >=5.0.0, <=5.0.11 || >=5.1.0, <=5.1.3) should upgrade to version 5.1.4 or later to mitigate this security issue (GitHub Advisory).